There is a new Direct Deposit phishing attack you need to watch out for.
It's a sophisticated scam that starts with an official-looking email that asks you to click a link and access a website. Next, they ask you to confirm the data with your real username and password. Last, they use your info to access payroll portals and reroute your direct deposit amounts to bank accounts owned by the bad guys.
The lesson here is to never give anyone your credentials in response to an email... Think Before You Click!