Attackers use email as an attack vector because it is so widely used by businesses. The first line of defense against attacks like these is employee training. With a vigilant workforce, you will reduce the likelihood of a successful attack significantly and create a security-minded culture.