No, it's not sophisticated. They're using "sophisticated" inappropriately here for pure PR.

Just because phishing is common, doesn't make it sophisticated.