Technically, that isn't an insider attack. It's an external threat actor who is using the access provided by the compromised machine of the (presumably innocen

Technically, that isn't an insider attack. It's an external threat actor who is using the access provided by the compromised machine of the (presumably innocent) insider. Still a valid threat, just not an insider threat.