A whaling attack is a type of attack that targets high-profile employees such as the CEO or CFO in order to steal sensitive information from a company, as those that hold higher positions within the company typically have complete access to sensitive data. In many whaling phishing attacks the attacker’s goal is to manipulate the victim into authorizing high-value wire transfers to the attacker.