Research reveals the emergence of a “phish-free PayPal phishing” scam.