It turns out that halfway clever phishing attacks really, really work

[theodore604]

If I’m reading an email in gmail and there is an attachment that sends me to a link where I need to sign into gmail… I’d immediately be all WTF?