They also constantly refine their tools and techniques. "While one-to-one attacks and one-to-many attacks were more common when impostor attacks first began to emerge, threat actors are finding success in attacks using more than five identities against more than five individuals in targeted organizations," Proofpoint researchers noted.