LastPass

If you still use LastPass and get an email pretending to be from one of their employees about "unauthorized account activity", just delete it.

The link in the email goes to a fake website where it asks you to log in....and you guessed it...they steal all your LastPass account info and all your stored passwords...