Phishing operation with links to Russia, Armenia compromised Western cargo companies, researchers find