Over 500 Organizations Hit in Years-Long Phishing Campaign