I think someone in my company clicked a phishing email.

Best course of action is to get a spam filter that not only looks for malware and other security threats but also provides a URL filter.  This adds an additional level of security as if a user clicks a link in an email and it is a threat.  It has to go through the URL filter and be an approved site before the user is allowed to reach the site.