And don't think for a moment that the attacker will only target people who use company computer systems. What about the guy in the mail room? "Will you do me a quick favor? Drop this into the intracompany mail pouch?" Does the mail room clerk know it contains a floppy disk with a special little program for the CEO's secretary? Now that attacker gets his own personal copy of the CEO's email. Wow! Could that really happen at your company? The answer is, absolutely.