A massive phishing campaign has targeted more than 550 million email users globally since the first quarter of 2018.