The clever, interactive phishing campaign is a sign of increasingly complex social-engineering attacks, researchers warn.