A recent attack on the accounts of Defense Department employees suggests how easily people can be duped into clicking on dangerous links.