The e-mail inserted a shortcut hyperlink to a website that appeared like the vendor’s and insisted he signal into his account immediately.   Instantly change the passwords with your afflicted accounts and any where else you may use the exact same password.