Phishing began as a clumsy trick — a fake email, a misspelled domain, and a few unlucky victims. Phishing-as-a-service changed…