Is spear phishing the new ransomware?