This phishing attack is using a sneaky trick to steal your passwords, warns Microsoft

Hovering over a link in an email isn't going to be enough to check if it's going to take you to a dangerous site.