U.S. regulatory organization, we would expect recipients of these spear phishing attempts to either work for U.S.based organizations or be U.S.-based representatives of organizations located elsewhere. However, it is possible