Loading: Detecting and characterizing lateral phishing at scale