Proofpoint researchers said attackers targeted physics and engineering departments, and warn that the campaign is likely ongoing.