A Phishing Test Promised Workers a Covid Bonus. Now They