Australian workers are falling for bogus phishing attacks at almost twice the global rate, concerning research shows.