Attacks begin when users are lured into “visiting suspicious websites or click on phishing links that download malicious software onto their computer.”
Better title; "Stupid people let people into their email accounts by not knowing how computers work".
Not really a hack, more of a manipulation. I don't care if morons get compromised because their OpsSec sucks.