Senior Admin gets a phonecall from CFO about a spearphishing email... that the helpdesk claimed was clean and legit. CFO forwarded the message onto the Accounting distribution list.