It starts innocently enough: an employee receives an email that looks like it’s from the CEO, urgently requesting a document. Without a second thought, they click the link, and just like that, the company’s network is compromised. Stories like this are…