When they send out the phishing-simulation email campaign from the "compromised insider account" it's going to fool a lot more people!