The offer looked real. Clicking it reportedly led to mandatory cybersecurity training.