For years, staying safe online came down to a few simple rules: don't click on suspicious links, ignore calls from unknown numbers, and be wary of emails riddled with spelling mistakes.