Sources tell news agency that as pandemic rages, state actors use phishing techniques to try to gain access to personal accounts of staff