The campaign is the latest case of business email compromise, which costs victims billions of dollars annually.