Fishy? It seems quite likely that such a thing could be overlooked. The NSA was (as the article says) concentrating their efforts on the DPRK's nuclear weapons program. Some spear phishing attacks aren't exactly a priority in comparison.