Whaling attacks targets high-level executives of organizations. It’s usually key employees who have access to financial and/or sensitive data, like a financial manager, or an HR employee.