The email includes a PDF that looks like a legit invitation: “Join us on a secure Department of State platform.” But that document nudges victims toward a phony login site. 4. Creating an App-Specific ...