Re: So it was Russia
"...Couple that with the threat of firing the person who clicks on a bloody link/attachment without thinking, and we have the start of proper on-site protection...."
Don't be bloody stupid. The only thing that achieves is a culture of fear and blame where mistakes - often ones that begin as simple for the right people/person to correct without much ado - get buried out of fear until they become much bigger, much more difficult problems to handle.