It's an especially subtle phish because the attacker basically tricks you into phishing yourself - remember, in the attack scenario, you're the one requesting the link!