APT3 initiates a phishing campaign by sending spear-phishing emails containing links to a compromised website hosting the CVE-2015-3113 exploit. The campaign aims to deliver a malicious Adobe Flash exploit to the target organization.