Why smart people click: fifteen years of watching it happen

Phishing is not a knowledge problem. The people who click are usually the ones doing their jobs properly, and that is exactly what the attack is built to exploit.