Researchers from Sophos Labs said the attack was noticed after the firm’s own employees were targeted with spam emails. These emails were written with at least a basic level of social engineering.