The most effective phishing and malware campaigns usually employ one of the following two age-old social engineering techniques. Impersonation phishing campaigns may also contain a victims name, email address, account number, or some other personal detail. With this technique, attackers generate a fake situation to instill a sense of urgency or panic in the victim. These campaigns employ various methods including email spoofing, fake or real employee names, and recognized branding to trick users into believing they are from a legitimate source.”]
Source: https://blog.sucuri.net/2019/02/hackers-use-fake-google-recaptcha-to-cloak-banking-malware.html