I was just subjected to the most credible phishing attempt I’ve experienced