Also, the term "sophisticated" is almost meaningless here, and that's usually the case when talking about these kinds of issues. Pretty straightforward Nigerian

Also, the term "sophisticated" is almost meaningless here, and that's usually the case when talking about these kinds of issues. Pretty straightforward Nigerian prince style scam is now "sophisticated" phishing attack. We already had enough issues in infosec with companies claiming they're all attacked by "APT" and "state-sponsored actor". It just seems an easy way to dodge embarrassment and looking silly. Of course, there are real cases where the person/company may actually be a victim of a sophisticated phishing attack (or APT/state-sponsored attack, etc) but the terms lose their weight when they are being thrown around like this.