Experts warn the barrier for entry into phishing has lowered even further, raising the stakes for cyber-defenders.