Compromised Internal Email Account

Adversaries send phishing emails from within an organization’s own email environment by abusing compromised user accounts, making messages appear trustworthy and internally sourced.