Email Threat Report from FireEye shows rise in phishing and impersonation attacks. Phishing emails are easy to deploy and do not require other preparation from the attacker than crafting a vague message that is convincing for a large number of victims to fall for it. Using impersonation to lead the company employees to a phishing site seems to be the most recent evolution step in malware-less email threats, according to the report. The end goal is the same as ever: trick the user into transferring money or disclosing information that could lead to a more efficient attack.
Source: https://www.bleepingcomputer.com/news/security/crooks-combine-phishing-and-impersonation-for-higher-success-rate/