A malicious email campaign dressed as electronic invoicing shows how trusted business channels can be turned into low-friction phishing paths.