The approach precedes the attack. It has to and Green-on-Blue attacks are no different. An attacker must get closer to his target in order to be successful, but it also is going to cause that person to stand out from the baseline. If you are a new reader, I recommend you take a look at the article explaining Proxemic Pulls to better understand this dynamic before moving on: