Effectively unstoppable
"CEO impersonation" is going to maintain its utility as a criminal technique as long as business culture tolerates CEOs/directors/managers who pull rank to override their own company's security and IT policies (and then fire or demote anyone who tries enforce the policy).