Traditional methods of identity deception are being fought by legacy security companies, making it difficult for attackers to spoof. Account takeover provides a new way for cybercriminals to compromise employees and their organizations.