An accounting clerk receives an email that appears to come from the company CEO, addressing the clerk by name and referencing an actual upcoming acquisition. The message urgently requests an immediate wire transfer to a new vendor and asks the clerk to keep the matter confidential until the deal closes. The email address is slightly misspelled from the CEO's real address. Which type of attack is this MOST likely an example of?