Account impersonation

Evil user stories

As a malicious actor, I want to appear to be the account of a known target in a group because their friends will add me as a contact and share documents with me.

countermeasures:

• Account verification