Puzzling Phishing Email

Company occasionally receives an email from an external account (some random gmail account) asking for a direct deposit change. No uncommon, but the email has the employee info - full name and title. And it's address to the HR person.

I'm curious if there's a scrape of information - like from LinkedIn - or if there's some other way this information is being gathered, that basically lays out the org. I'm sure there are numerous ways to get this info, …

cybersecurity email phishing