Phishing scheme shows CEOs may be ‘most valuable asset,’ and ‘greatest vulnerability’