A phishing attack recently uncovered by researchers pretends to share information about an EFT by offering up a link to download an HTML invoice that then loads to a page with Microsoft Office branding that’s hosted on Google Firebase.