This password-stealing phishing attack comes disguised as a fake meeting request from the boss