[This post is from Nerd Dennis Houseknecht]
The important point here is not “who”, but “how”. This is an example of spear phishing at its best (worst?). The best firewalls, intrusion detection systems, and data loss prevention in the world cannot stop phishing attacks – only education and understanding will foil these attacks.
The weakest part of security is not the hardware. It’s not the software. It’s the “wetware”.