Email Spoofing

Then the site will then redirect to the legitimate password reset page for your site, so the user does not suspect anything.

gmail.com/accounts/reset

The password your entered was incorrect, please try again.

Looking to reset your password?

Enter your current password to proceed:

Sign In
The hacker has stolen the password