Citizen Lab discovered a large amount of phishing links being used by a hacking group. These links are often shortened to hide their true destination, and can be used to fool users into giving up sensitive information.