Outlook CSS techniques can spoof Microsoft sign-in and capture passwords, while Gmail image-set() can trigger external ...
Two security researchers bought cheap domains—including noreply.net and deleteduser.com—and set up email listening services.