Businesses and individual email users now face a phishing threat that has grown faster than most security teams anticipated.