A phishing campaign targeting healthcare providers aims to lure recipients to a fake Evernote notepad website in an attempt by hackers to harvest security credentials, federal authorities warn.