I had a bash with that paper. It is pure and utter tosh - I started with the ... start and swiftly moved to 6. Conclusion.
"Thinking like an attacker is a skill rightly valued among defenders."
and
"Attacking as a business must identify targets, and this is easy only if we believe that attackers have solved a problem that has vexed multiple communities for decades."
How so? For me the point of the paper is the elimination of the ones who will not fall for such a scam in the first place. The title of the paper says it all.
"Thinking like an attacker is a skill rightly valued among defenders."
and
"Attacking as a business must identify targets, and this is easy only if we believe that attackers have solved a problem that has vexed multiple communities for decades."
Bollocks!