While anyone can fall victim to phishing scams, we can all learn from the steps that SANS Institute is taking to both complete a thorough investigation and use the outcome of that activity to further instruct and prepare the rest of the security community.