This story was originally featured on Fortune.com
Фото: Saqib Majeed / SOPA Images / LightRocket via Getty Images。关于这个话题，PDF资料提供了深入分析
«Поступил сигнал, что в районе минных полей гражданские лица. Необходимо эвакуировать. Вызвали саперов. Саперы объяснили, где мины находятся. Выдвинулся с одним своим солдатом. Я шел впереди, он за мной, и замыкали нас медики. Обойдя все минные поля, вышли на открытое место и, пытаясь забрать гражданских, попали под минометный обстрел», — рассказал Корниенко.，更多细节参见爱思助手
When we investigated these pages, there were some clear indicators that something was wrong. The biggest one is that the Microsoft login flow isn't hosted on a Microsoft domain. While websites can use Microsoft as an authorization source, this normally involves redirecting to a Microsoft-controlled page and then back to the original site once authorization is complete. That's not what's happening here. Beyond that, none of the secondary interface elements work. "Create a new account," "Sign in options," "Can't access your account?" all either do nothing when clicked or redirect back to the current page. This is something we see over and over: phishing kits only implement the happy path where the victim enters their credentials without clicking anything else. Finally, the error messages are wrong. We went through a legitimate Microsoft auth flow and recorded the error states (for example, entering a non-existent email) and compared them to what the phishing page displayed. The language didn't match.