In a recent event, company employees were sent emails with attachments that contained malware. The email described the attachment as an invoice for payment that was overdue. When the attachments were opened, keylogging malware was installed on the employees computer. This malware obtained the employees login credentials. Following this, the credentials were emailed to a person outside of the company, who was not an employee. Which one of the following options best describes the vulnerability in this situation?

Group of answer choices

The employee who opens the attachment

The email sent to the employee

The credentials used to login to employee accounts

The non$-$employee who is a recipient of the employee$$s login credentials