More and more organisations are falling victim to credential phishing attacks, according to Menlo Security.