Fake 401K year-end statements used to steal corporate credentials

https://www.bleepingcomputer.com/news/security/fake-401k-year-end-statements-used-to-steal-corporate-credentials/