This is the story of how I became the target of a spear-phishing attack, and how I managed to dodge the bullet. It all started with an email that looked completely legitimate. The sender was someone I knew—a colleague from work. The subject line was simple: ‘Urgent—Please Review.’ It seemed routine, nothing out of the ordinary. But as I opened the email, I noticed something strange.