Not just Podesta fooled by phishing email

As Wikileaks on Saturday released the 22nd batch of emails hacked from the account of a top aide to Hillary Clinton, the emails show that it wasn't just John Podesta who was duped by a phishing email, but also those who worked in the Clinton campaign on IT did not immediately realize it was an effort to get Podesta's password.

In a new message out this weekend, another Clinton staffer confidently says she's ready to help Podesta:

Credit: Jamie Dupree

Credit: Jamie Dupree

Two other staffers had already assessed the phishing email incorrectly, thinking it was a legitimate warning from Google, that someone from Ukraine had tried to crack his email account.

"The gmail one is REAL," wrote one staffer in an email released on Friday, which showed the underlying phishing attack for the first time.

One internet threat expert who contacted me on Friday said he was not surprised that the Clinton team had fallen for this phishing email.

"I look at a lot of these and the people who create these messages are very good at making something that is deceptive," the expert told me.

"Most people don't hover their mouse over a link like that to see where it would lead to before clicking," I was told.

Also of note, the lengthy bit.ly code that was used as a link at the bottom of the phishing email - that would take Podesta not to Google - but another site, where the hackers could then get his password.

Credit: Jamie Dupree

Part of that code uses what is known as the "Base64" format - you can put a string of text in like, "john.podesta@gmail.com," and it spits back a certain code.