A company’s CEO receives an urgent email that appears to be from the company’s legal department, requesting immediate approval of a confidential wire transfer for a “pending acquisition.” The message uses formal language and references real executives in the organization. Which type of phishing attack is being attempted?

Question

BlackTom AI · Accepted Answer

Whaling targets high-profile individuals such as executives; it is a specialized form of phishing aimed at CEOs, CFOs, and other senior leaders to trick them into authorizing high-value transactions or divulging sensitive information.

1) Relevant knowledge points and concepts
- Phishing: social-engineering emails designed to steal credentials, money, or data.
- Spear phishing: targeted phishing aimed at a specific person or group with personalized details.
- Whaling: a subtype of spear phishing that specifically targets senior executives or high-value targets with tailored messages and high-stakes requests.
- Spam: bulk unsolicited messages that are not personalized and generally indiscriminate.
- Business Email Compromise (BEC): a fraud where attackers impersonate officials to request wire transfers; often overlaps with whaling when executives are targeted.

2) Step-by-step reasoning
- Identify the recipient: the CEO (a high-profile executive).
- Examine the content: urgent request for approval of a confidential wire transfer tied to a “pending acquisition” — a high-value financial action.
- Note personalization and legitimacy cues: formal language and references to real executives and the company’s legal department, indicating the attacker researched the organization to craft credibility.
- Assess objective and risk: attacker seeks to authorize a significant financial transaction, typical of whaling/BEC attacks.

3) Intermediate logical steps
- If the target is a senior executive + message is highly personalized + the objective is a high-value transaction, then the attack is whaling.
- This distinguishes it from general phishing or spam.

4) Why the correct answer is correct
Whaling is the precise label because the attack is tailored, targeted at the CEO (an executive), and seeks a confidential, high-value wire transfer—hallmarks of whaling.

5) Why other options are incorrect
- Spear Phishing: close, but broader—spear phishing can target any individual; whaling is the specific subtype for executives.
- Spam: mass, non-targeted, and usually not personalized or request high-value transfers.
- Email Phishing: a generic category; the most specific and accurate choice is whaling.

6) Conclusion
The correct answer is Whaling, which matches the provided answer.

类似问题

What is the name for emails that are sent to users, pretending to be from their bank and asking for username and password?

What is the name for emails that are sent to users, pretending to be from their bank and asking for username and password?

Phishing is a form of spoofing.

An employee clicks on a link in an email from what looks like a fellow employee and is taken to a fraudulent website which asks for personal information is an example of:

Which of the following is a highly targeted social-engineering attack?

A project has a required return of 12.6 percent, an initial cash outflow of $42,100, and cash inflows of $16,500 in Year 1, $11,700 in Year 2, and $10,400 in Year 4. What is the net present value?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单