Usually, it informs the victim that a scheduled Assembly should be changed. The worker is asked to complete a poll about when a great the perfect time to reschedule can be by using a website link. That url then brings the victim to some spoof login web page for Microsoft Office 365 or Microsoft Outlook. As soon as the worker enters their login info