The cybersecurity refrain when encountering phishing emails invariably advises: “don’t click on that link” and “report that ...