A new report reveals hackers are shifting tactics to target humans in scams, and it’s working.