I just got a legitimate email from my employer regarding a recent benefits change that rolled out across the company. That email:
Came from a third party
Had an urgent call to action "Accept TODAY or forfeit!"
Linked to a foot-long url that was NOT the email domain.
I just...