The scariest part is that you knew that there was something suspicious and still [almost] got phished. There's no reason to believe anyone (technical or not) that wasn't looking out for something suspicious would have possibly avoided the attack.
Pretty nasty phishing attempt, way more subtle than past attacks.
Pretty nasty phishing attempt, way more subtle than past attacks.