Information Technology Specialist (ITS) Cybersecurity Practice Exam

Which social engineering attack targets high-ranking individuals to compromise sensitive data?

1. Phishing

2. Smishing

3. Whaling

4. Vishing

The correct answer is: Whaling

Whaling is a specific type of social engineering attack that focuses on high-ranking individuals within an organization, such as executives or other senior staff members. The term "whaling" comes from the idea of targeting the "big fish" within a business. Attackers often employ sophisticated techniques to exploit these individuals, as they are typically privy to sensitive data and have the authority to access critical systems and resources. The effectiveness of whaling lies in the research and personalization that attackers conduct about their targets. They craft convincing messages that are tailored to these high-ranking individuals, often mimicking legitimate communication to appear trustworthy. This personalization increases the chances of the victim falling for the deception, potentially leading to unauthorized access to confidential information or financial losses. Phishing, smishing, and vishing are all forms of social engineering attacks, but they are generally aimed at broader audiences or use different methods. Phishing typically involves sending fraudulent emails to a wide range of users, smishing utilizes text messages, and vishing employs voice calls. While these methods can target anyone, whaling is distinct in its focus on executive-level personnel, making it a targeted and more sophisticated attack strategy.