“Phishing” scam uses old passwords from data breaches to extort relatively small amounts of money.