> If you're being asked for data by someone you don't know
That's not how spear phishing or even phishing works. The email looks like it came from a fellow employee/boss/trusted party.
That's not how spear phishing or even phishing works. The email looks like it came from a fellow employee/boss/trusted party.
If a company gets owned because they failed to implement SPF or DKIM properly, IT is at fault, not the employee.