A keming attack in the wild...

This happens all the time, it's a classic phishing tactic.