Kaspersky researchers have figured out how cyber attackers are placing phishing HTML files into the InterPlanetary File System.