One thing to remember: the closer to the start in the chain you are able to prevent an attack, the significantly less high-priced and time-consuming the cleanup will be. Therefore, they will be more suspicious of spearphishing strategies. Be aware that not all tactics is often mitigated. This knowledge base https://ieeexplore.ieee.org/document/9941250