Attackers are using this low-cost-high-reward method of exploitation to compromise users and it's costing companies billions.