Many organizations spend significant sums of money on phishing training for employees. Even after training, a consistent baseline of employees will still click a malicious link. Corporate communications often look like phishes themselves, causing confusion between legitimate and illegitimate senders. The FBI says losses from business email compromise (BEC) have increased by 1,300 percent since January 2015, and now total over $3 billion worldwide. The average office worker receives on average 120 emails per day. When operating under information overload, that worker is going to be taking cognitive shortcuts to reduce interactions.”]
Source: https://blog.malwarebytes.com/business-2/2019/09/when-corporate-communications-look-like-a-phish/