Followed the link and the read me is bit spare on details. For the less technical this still would require the phishee to manually enter credentials which then can be relayed to the attacker. Correct? The article mentions this happened while the author was asleep — any thoughts on how that would work?
What is less clear to me is why he borrowed so much money to setup this business? The debt had as much or more to do with his going broke than the flawed whistleblower process. As with many things in life this is a cautionary tale about not counting on something before it’s done.