Even seasoned cybersecurity reporters can get duped by a well-crafted scam email. Here's how I unraveled this one, step by step. Can you spot all the red flags?