Probably not many, but simply acting on the authorization of any email, not to mention one that is not from the CEO's corporate account is astoundingly credulou

Probably not many, but simply acting on the authorization of any email, not to mention one that is not from the CEO's corporate account is astoundingly credulous behavior. It shouldn't actually _be_ astounding, I suppose, given the number of people who fall for online scams, but we're talking about people within a corporation who have the authority to move large amounts of money between accounts. So yeah, still astounding to me :).