Attackers are reportedly targeting IKEA employees in a phishing campaign that leverages stolen reply-chain emails.