The two largest phishing attacks together made up 93.5% of the total stolen funds, amounting to $293.4 million.