> In fact how the funk do I know YOU'RE not the undercover North Korean agent?
If he's a undercover North Korean agent and you leave your computer unlocked for he to steal data, you'll likely be fired. So you should be thankful that he's not one in this particular hypothetical scenario.
Let's consider that the colleague IS IN FACT a mole, a spy, an agent of a hostile entity be it a state or why not, a competitor. Iran or Russia couldn't care less about your enterprise business operations and customer relations software but SAP would be glad to silently eliminate a competitor.
So said agent takes the opportunity to plant the malware on ANOTHER employee's computer, that's self-understood. He's not so stupid to risk incriminating himself. If all goes well, nobody will even notice where the infection began. If somehow it gets traced to it's root ... it's Johnny, the light hearted and jovial slightly overweight colleague that everyone likes and not Timmy the bleak and dull looking fellow that nobody quite notices outside mandatory interactions like the daily standup. Who would have thought that all that friendliness and charisma of Johnny was just a facade to his true evil intentions?
If he's a undercover North Korean agent and you leave your computer unlocked for he to steal data, you'll likely be fired. So you should be thankful that he's not one in this particular hypothetical scenario.