During the attack, detected by researchers at McAfee Labs, users are presented a fake, but legitimate looking, e-mail alert warning them that their password needs to be reset. The e-mail comes with an ...