Zuckercorp says surveillance-for-hire vendor was still running phishing operations after federal court told it to knock it off