Cybercriminals used the W3LL phishing kit to target over 17,000 victims worldwide. They stole passwords and multi-factor authentication codes. The FBI has taken down the phishing operation.