Researchers have discovered a sophisticated, convincing phishing campaign targeting PayPal users.