Researchers at Safeguard Cyber describe a phishing campaign that’s posing as a Japanese rail ticket reservation company.