[jethack]

Worth noting these have been in the wild for years. It's often used to phish for Steam accounts.

BTW, if you're using TOPT 2FA, that typically gets phished too.