Companies trust lawyers with the most sensitive information they've got. Attackers are aiming to exploit that bond to deliver malware.