Hackers drop malicious phishing emails on targeted user inboxes