Late one evening, John, a small business owner, sat down to catch up on some work emails. He received what appeared to be a routine message from one of his most trusted suppliers, urgently requesting him to update his payment details. Without a second thought, John clicked on the link and entered the requested information.