We’ve all heard the proverb: Give a man a fish and you feed him for a day. Teach a man to fish and you feed him for a lifetime. Well now, threat actors don’t even have to exert the effort to phish to land business email accounts.

https://www.securityweek.com/attackers-are-landing-email-inboxes-without-need-phish