I've received an email today from a know contact, that asked me to download an
attachment. That was not unusual.
2 replies
Replying to @coderbyheart
But that lead to a PDF which itself contained a link to a login form for
Microsoft Credentials, hosted on http://woofooz.com
Now I was suspicious and wrote to the known email of the sender.
And I got a reply right away.
Replying to @coderbyheart
Now, the contact would not use this language (they are Norwegian) so I double
checked by SMS and they got p0wned by an attacker who took over their email.