“Whaling” attacks are a refined kind of phishing in which hackers use spoofed or similar-sounding domain names to make it look like the emails they send are from your CFO or CEO. Domain-spoofing is the most popular strategy, accounting for 70 percent of such attacks. 55 percent of IT professionals surveyed this month said their organizations have seen an increase in the volume of whaling attacks over the last three months, security firm Mimecast says. Educating senior management, key staff and finance teams is one of the best ways to combat the attacks.”]