Companies often send out simulated—or fake—phishing emails to employees to see who takes the bait and click. Those who fall ...