Phishing attempts can already be made indistinguishable from legitimate emails, with all red flags eliminated. But some security experts are using the technology to get ahead of attackers