This case study presents a social engineering attack using a shortened URL embedded in a phishing email. The email, crafted to impersonate internal IT support, urged the user to “update their credentials” by clicking a masked bit.ly link.