It uses fake email-ids or messages containing viruses affected websites. These infected websites urge people to enter their personal information such as login information, account’s information.