This is one of the terrifying, probably already happening threats presented by current LLMs.

Social engineering (and I include spearphishing) has always been powerful and hard to mitigate. Now it can be done automatically at low cost.