Whaling is a type of spear phishing in which threat actors directly target C-level executives at an organization. CEO fraud is a type of phishing attack in which the attacker impersonates an organization’s CEO or perhaps another senior executive (CFO, CIO, etc.).