A whaling attack is a strategy used by cybercriminals to impersonate a key player at a company and directly target senior or other important employees with the goal of stealing money or sensitive information or acquiring access to their computer systems for criminal purposes.