A phishing campaign is targeting organisations trying to help Ukrainians fleeing the Russian invasion.