210-250 · Question #115
Which description is an example of whaling?
The correct answer is B. when attackers go after the CEO. Whaling is a highly targeted phishing attack aimed specifically at high-profile executives such as CEOs, making it distinct from broader phishing techniques.
Question
Which description is an example of whaling?
Options
- Awhen attackers use fraudulent websites that look like legitimate ones
- Bwhen attackers go after the CEO
- Cwhen attackers target specific individuals
- Dwhen attackers target a group of individuals
How the community answered
(33 responses)- B91% (30)
- C6% (2)
- D3% (1)
Why each option
Whaling is a highly targeted phishing attack aimed specifically at high-profile executives such as CEOs, making it distinct from broader phishing techniques.
Using fraudulent websites that mimic legitimate ones describes pharming or website spoofing, not whaling.
Whaling is defined as a spear-phishing attack that specifically targets high-profile executives such as a CEO, CFO, or other senior leadership. The term originates from the idea of going after the 'big fish' within an organization. Because executives hold authority over finances and sensitive data, they are prime targets for attackers seeking large-scale financial fraud or data theft.
Targeting a specific individual describes spear phishing, which is broader than whaling and does not require the target to be a senior executive.
Targeting a group of individuals describes generic phishing campaigns, not whaling, which is focused on a single high-profile executive.
Concept tested: Whaling social engineering attack targeting executives
Source: https://csrc.nist.gov/glossary/term/whaling
Topics
Community Discussion
No community discussion yet for this question.