Hackers for hire, a particularly ignominious phishing campaign, and more of the week’s top security news.