If a victim is unwise enough to enter their primary Microsoft or Google credentials on the phishing page, the data is sent to ...