What a modern day hack is or looks like, from the FBI
Please take a good look at this information from the FBI and their 2011 case labeled as "Operation Hackerazzi", the famous case which convicted a Florida man of hacking into celebrity Apple product personal accounts.
Web resource: FBI — Florida Man Arrested in “Operation Hackerazzi” for Targeting Celebrities with Computer Intrusion, Wiretapping, and Identity Theft
This FBI outline are the steps to a typical "hack" / "attack" against a user to obtain information to gain more information from others to collect sensitive account information to be used against the victims or email recipient/company. This process is referred to as a reverse engineered attack, since front end cyber attacks are not used so much any more.
Please review these points in your organization with your people to be aware or alert of these phishing attempts/attacks.
Of course if you have more questions on this material please let us know.