Of course, it's bollocks, but the social engineering was quite clever, using a stolen password to convince the recipient that the threats were real.
Imagine you used porn. And the same password on everything.
These two facts are enough to at least shake your and, at most, make you shit your pants.
Just try putting yourself in the victim's shoes.
Biting the hand that feeds IT
