As a result, the victim often shares private information with the hacker such as bank account information or login credentials providing access to your network
Here’s more on how it works:
It’s a non-intrusive pass/fail test. You will receive a spoofed email “from you to you”. If it makes it through into your inbox, you know you have a problem.