On the security side, Enzoic states that your "Password will be sent securely to our server to check if it's compromised," and it doesn't store your passwords.

Attackers behind the phishing scam included an attached HTML file containing embedded JavaScript code that had one function: covert background checks of password use. When credential input was ...