What type of social engineering targets senior officials?

Whaling refers specifically to a type of social engineering attack that targets high-profile individuals, such as senior officials or executives within an organization. The name "whaling" is derived from the idea of hunting the larger, more significant targets (the "whales") in the ocean of potential victims. This form of attack is particularly sophisticated, often involving personalized approaches that leverage information about the target to craft convincing and deceptive messages, whether through email, phone calls, or other means.

Whaling exploits the authority and influence of senior officials, making it especially dangerous because these individuals may have access to sensitive information and decision-making capabilities. Attackers may impersonate trusted sources, such as fellow executives, partners, or even IT departments, to persuade the target to divulge confidential data, approve wire transfers, or execute other actions beneficial to the attacker.

In contrast, other types of social engineering, such as spear phishing, while also focused on individuals, are not specifically limited to high-ranking officials. Scareware relies on deception through fear to manipulate individuals, and vishing involves voice calls rather than targeted email tactics. Thus, whaling is uniquely positioned as a deliberate strategy aimed at high-value targets within an organization, making it the correct answer in the context of this