Whaling: Difference between revisions

From ACT Wiki
Jump to navigationJump to search
imported>Doug Williamson
(Add link.)
imported>Doug Williamson
m (Categorise.)
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
''Cyberthreat''
''Cyberthreat''.


Whaling is a fraud using the names of legitimate senior executives and forged (spoofed) email addresses to induce employees to send sensitive documents or money to the fraudsters.
Whaling is a fraud using the names of legitimate senior executives and forged (spoofed) email addresses to induce employees to send sensitive documents or money to the fraudsters.
Line 19: Line 19:
* [[Social engineering]]
* [[Social engineering]]
* [[Spoofing]]
* [[Spoofing]]
* [[Whale investor]]
[[Category:Identify_and_assess_risks]]
[[Category:Manage_risks]]
[[Category:Technology]]

Latest revision as of 08:51, 7 August 2019

Cyberthreat.

Whaling is a fraud using the names of legitimate senior executives and forged (spoofed) email addresses to induce employees to send sensitive documents or money to the fraudsters.


Whaling can be considered to be a variant on 'phishing' frauds, potentially with larger criminal proceeds.

Hence the name.


See also