Dramatic loss of $674,000 in phishing scam – incident analysis