If you have an email address at work, you’ve probably found that some of the spam it gets is aimed at your organisation.

It could be as simple as using your full name in the subject line. Other times, it might pretend to be from a colleague.

Hackers often spear-phish ordinary employees, so they can use that employee account to scam others in the same organisation.

This means that everyone is a target for spear-phishing, even if they don’t deal with money in their job role.