Phishing attacks at highest level in three years