Cybercriminals have deployed a new "phish-free" Pal-involved email phishing attack that could fool even those on top of their cybersecurity game, warns Fortinet CISO.