They share a malicious URL or OSRS gold attachment to steal the login credentials and account details directly from the user in order to gain access to secure information.
The link redirects users to the password reset page. Then, in the background, it loads an attack script that steals session cookies of the user, which is then a result of an XSS attack, and opens the account to person who is...
Arabic
French
Spanish
Portuguese
Deutsch
Turkish
Dutch
Italiano
Russian
Romaian
Portuguese (Brazil)
Greek