Knowing an individual's network of names and email contacts in a highly specific domain could be quite attractive for a phisher. This seems quite different fro

Knowing an individual's network of names and email contacts in a highly specific domain could be quite attractive for a phisher. This seems quite different from viewing the contact list on, say, Twitter, where an individual explicitly makes their contacts known to the world (and via synonym only). The response surprises me.