We&#x27;ve been a target of this attack previously and it&#x27;s not as simple as email spoofing as email addresses aren&#x27;t (in Google Apps at least) displayed prominently, firstname.lastname@gmail.com with a corresponding name and profile picture is how we were targeted. Very easy to fall for (especially in companies that aren&#x27;t strict about personal&#x2F;professional email separation).