Forcepoint researchers describe a layered attack chain that slips past filters by mimicking everyday business behavior.