Attacker posts 6.8 billion email addresses online, though researchers estimate only 3 billion are legitimate. The massive database enables unprecedented phishing attacks.