The recently released 2018 Trustwave Global Security Report published an email thread that our incident investigators received showing a real CEO fraud operation in action.

https://www.trustwave.com/Resources/Trustwave-Blog/Here-is-an-Email-Thread-of-an-Actual-CEO-Fraud-Attack/