A whaling attack is a type of cyberattack in which an attacker masquerades as a trusted entity in order to trick victims into providing sensitive information or taking the desired action. These attacks are often targeted at high-profile individuals or organizations in order to maximize their impact. Whaling attacks can be difficult to detect, as attackers often go to great lengths to make their emails and other communications appear legitimate.