The Dyreza, or Dyre, Trojan has been spotted phishing credentials in attacks against the IT supply chain.