Nobody gets phished with a plain text email/site that says “give me your system access”. Creating a replication of their intranet gateway requires recon to kno

Nobody gets phished with a plain text email/site that says “give me your system access”. Creating a replication of their intranet gateway requires recon to know what gateway they use, (if they use a custom api) recreate that api, and finding who to actually send the fake page to. I’d call this spear fishing. That’s sophistication. Recon and tailoring to the target is sophisticated. It may not be super complicated, but it shows sophistication. Sophistication is a spectrum between ”hey mister, and I have your credentials?” and nationstate APT’s.