This seems very serious, at least for those with high-value channels.
I'd like to see some cost-analysis for this kind of attack. What's the cost of running the attack, and at what point does the attack become profitable under different scenarios:
1. victim does not detect the attack
1. victim is not using automation and defends against it manually and slowly