billy99k 17 hours ago

Social engineering is always more effective. You can more easily convince someone to open an attachment or phish them out of their account then break into the company infrastructure.