New research highlights a sophisticated, ongoing phishing campaign that has targeted over 130 organizations.