While phishing volumes fell globally for a second consecutive year, government organizations saw attacks jump from 92 million to 138 million as threat actors shifted toward high-value targets.