Cognitive Scaffold

Preparing your thinking workspace

arrow_back_ios_new
MENTAL MODEL · M0826

Whaling

Whaling
TechnicalHigh supportCybersecurity
Included
account_tree

Version 1.0.0 · Updated 2026-07-30

CORE DEFINITION

A type of 'spear phishing' targeting high-value individuals (C-level executives, celebrities). It goes beyond sending fraudulent emails, involving in-depth research into the target's background and habits to craft highly deceptive lures.

SCAFFOLDING EFFECT

psychology

Reduce cognitive load

High-value defense. If you are in a high position, realize that ordinary scams won't fool you, but specially tailored schemes (e.g., forged regulatory subpoenas, exclusive circle invitations) are extremely difficult to guard against.

anchor

Anchor fast decisions

It is a high-end version of spear phishing: attackers first conduct open-source intelligence (OSINT) reconnaissance on high-value targets—social circles, schedules, job pain points—then craft highly credible lures (forged subpoenas, circle invitations). It exploits the target's psychology of being 'trusted/valued' due to their status, as well as negligence caused by busy schedules.

MINIMUM ACTION

In progress 0/1

Practice this model in one real situation:

Check to track your progress (stored locally)
Learning progress0%
account_treeGenealogyexpand_more
menu_bookReferencesexpand_more

Source support: Explicit

RELATED MODELS

Related model

Rubber Hose Cryptanalysis

No matter how complex your encryption algorithm is (AES-256, RSA), as long as you beat the person holding the key with a rubber hose or threaten his family, he will tell you the password.

arrow_forwardRelated model

Elastic Defense

Defence in depth (also known as deep defence or elastic defence) is a military strategy that seeks to delay rather than prevent the advance of an attacker, buying time and causing additional casualties by yielding space. Rather than defeating an attacker with a single, strong defensive line, defence…

arrow_forwardRelated model

Greyballing

A tool developed by Uber that showed fake vehicle locations and ghost cars to individuals identified as 'regulatory enforcement officers' or 'malicious users', thereby evading regulation.

arrow_forward