A new phishing-as-a-service platform has been discovered, and researchers are discussing how it works.