Sort:  

If you click on the bit in the message that says click here, it diverts you away to a fake login page, you enter password, and it sends you back to where you were to start with on steemit, they then have your master password, and they reset it, locking you out.

Ah. Wonderful. If it weren't for the fact that they're pretty much untracable you could sue them for theft though.