An email comes from your supervisor asking you to respond to a vague, but urgent request. It's easy to not pay attention to the from fields of the email, and you get messages from your supervisor all the time. What you're not expecting is the next request asking you to purchase iTunes gift cards, or a request to log into a suspicious looking website to view a document.
These types of attacks are called CEO Fraud, where a cyber attacker has harvested information about your organization and is attempting to exploit the trust people have for people they work with.
Visit the Information Security Communication site to read more about the attacks we've been seeing here, and what you can do to prevent yourself from becoming a victim.