Here's an example of a YouTube video that is used to drive traffic to a "XBOX" phishing site.



The actual phishing site looks like this:



The URL is fairly convincing. Turns out .TP is the country code for East Timor.

But why would anybody phish for accounts of some online game?

Because you can sell XBOX Live accounts for real-world cash: