2 ms·

I think by 'specific account' he means 'chosen account', in which case he'd be correct without more targeted social engineering.