The 'Bear' attacks: what we learned about the phishing campaign targeting Russian organizations