Targeted phishing geared to land the big one is known as a whaling attack. Those with the power to approve or provide a transfer of funds directly or have access to secure company information are the targets.

Cybercriminals will do their homework on these attacks. In-depth research into your organization, discovering corporate hierarchy, even sending probe emails from other accounts to see how you communicate and obtain a company email template format are all in play.

As with any phishing attempt, look at the email address, sender's name and job title, and inspect any links before clicking them. Look for spelling and grammatical errors.

Again, like generic phishing attacks, a call to urgency and need to send money or provide credentials are red flags!