Two employees of a multinational company created a phishing email to trick fellow co-workers into providing their personal information. The email was designed to look like it was coming from the target company's domain, but instead it came from a fake one created by the scammers.