Cyberthieves know that its better to trick you into doing their work than to break in. A recent attack used an employee accomplice who was to flag any meetings with multiple people and note who was presenting. A lot of attacks go beyond email scams to include efforts to get employees to do high-risk activities. Some people may not interact with senior management often enough to be able to detect a reasonably good fake. Few bosses will get upset if you challenge their identities, but they should thank you.”]