$ 0 0 Cisco says that the attack seems to have begun on April 24 with a series of phishing campaigns.