Business email compromise scammers are getting savvier with their lures – and new attack groups are emerging.