A phishing campaign is targeting Instagram users with phony notifications about failed login attempts, according to researchers at Malwarebytes.