More than half of the emails sent in the campaign, which use a 15-year-old piece of malware called Hupigon, targeted universities.