19 nov. 2018 - The attacker has setup a well-disguised login page that looks identical to the actual Spotify login page. However, they can't hide the actual URL .