PRMitM: Attackers Can Hide Password Resets Inside Account Registrations(bleepingcomputer.com)

https://www.bleepingcomputer.com/news/security/prmitm-attackers-can-hide-password-resets-inside-account-registrations/#.WVDRgB_fnN8.twitter