Actually, skip all of that: social engineering is still the best way, even NSA has stated that. Assuming that social engineering is hard (for example, the targ

Actually, skip all of that: social engineering is still the best way, even NSA has stated that. Assuming that social engineering is hard (for example, the target are computers operating machinery), while Windows is... not bulletproof, most applications (especially in-house apps) tends to be nothing more than a wooden gate, and therefore it's more expedient to do that than monitoring encrypt communications (obviously, it's has some benefits but it also has a lot of chaff, so it's better to have a wiretap directly).