Cofense uncovers sophisticated phishing attack targeting Spotify users with fake payment notices to steal login credentials and banking information.