Every time our C-levels get implicated in this stuff, email is never the medium. It's always text messages. Which makes sense; they're way easier to spoof, esp

Every time our C-levels get implicated in this stuff, email is never the medium. It's always text messages. Which makes sense; they're way easier to spoof, especially if the initial recipient lacks authority to initiate bank transfers and forwards a screenshot of the forged message as "proof" to someone who does-- it launders all metadata from the message itself. Even the timestamp is lost. And it's all out of band and not subject to internal firewalling, DMARC, nothing. Never trust text messages (or screenshots of them) as evidence of anything.