Spear-phishing campaign compromises executives at 150+ companies