Phishing is a very successful attack vector used by cyber criminals to cause harm to people and organizations. The average 10,000-employee company spends $3.7 million dollars a year dealing with phishing attacks. A phishing attack is successful when an email message persuades a person to take an action or reveal information which should not be disclosed. Whaling is a popular attack tactic used by cyber criminals to steal money and cause harm to an organization. Whaling attacks have cost the world over $3 billion dollars since 2013 according to the FBI. Students will learn how a whaling attack is conducted, see examples of whaling messages and learn how to identify them. Students will also learn what protections can be put in place to help defend against these attacks.