Researchers found a new callback phishing campaign abusing Apple's email notification system.