Employees thought they were fixing a browser error until fake IT support quietly walked them through infecting their own company computers