Security threats are evolving. As users put more security measures in place, the "bad guys" are thinking of new ways to get around them. Tricking users with email is a common technique.