University cyber teams have become accustomed to sending out routine phishing emails to unsuspecting staff who, without much thought, proceed to click a link that