Customers of global financial services firm JPMorgan are being urged to be on the lookout for suspicious emails, after security researchers confirmed a phishing attack aimed at stealing online banking credentials.