Even smart, knowledgeable experts can fall for phishing attacks. Here’s what happened, and how you can avoid the same fate.