A lot of financial related phishing emails use info gathered from social networks. The attackers use it to see who does what in the company and to come up with

A lot of financial related phishing emails use info gathered from social networks. The attackers use it to see who does what in the company and to come up with a nice email to someone in the finance department. Sure there is a lot of security theater but I think its important to understand that for attackers its definitely worth to spend a couple of hours on research. A successful email can quickly reach a 5 figures reward. Source: I work in email security