Phishing attacks are targeting personal, as well as professional, accounts.