“I think most cybercriminals realize that trying to defraud a law firm with a phishing scheme like this is not going to end well for them,” said Deveboise & Plimpton’s David Bernstein, the lead partner on the matter.