Despite the hours of security awareness training that employees undergo, they still click on credential phishing links at an alarming rate.