Attackers send fake voicemail notifications, tricking victims into visiting credential-harvesting sites.
