Successful phishing campaign leads attackers to confidential information of world soccer’s governing body.