A new phishing campaign exploits an ancient Microsoft vulnerability to unleash a stealthy remote access trojan on businesses worldwide.