Reply-chain attacks allow hackers to send malicious emails from genuine accounts