Phishing and hacking has now become software-as-a-service. https://blog.knowbe4.com/new-phishing-as-a-service-platform

Never give your credentials to anyone.  Never download or click on anything from email that you were not expecting.  If you accidentally click on something on a web page and you’re not sure what happened then call Carolina Networking.  Your boss will NEVER ask you to buy Visa or Apple cards for a client.