Users who connected to the specific webmail server that was attacked may have had their login details skimmed, although the purpose of the attack seems to have been simply to harvest email addresses.
Users may have had their login details, although the purpose of the attack seems to have been simply to harvest email addresses. These Users connected to the specific webmail server. This specific webmail server was attacked. Users were skimmed. These Users connected to the specific webmail server. This specific webmail server was attacked. The purpose of the attack seems to have been simply to harvest email addresses.