This happened at the FT a few weeks ago with "Syrian Electronic Army" posts and that was a successful phishing attack so "their lack of mastery of English" clearly isn't an issue.

Otherwise an excellent analysis of the likely vectors by the way.