Attackers are trying to steal credentials from corporate mail by sending lists of quarantined spam e-mails.