The campaign targets customers with urgent "maintenance" alerts designed to steal master passwords within hours.