A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.
It's not even your browser's fault.