Great stuff, @jovema!
We got to stay VIGILANT.
As you say, the phishing attempt gets somebody, the captured account starts posting the links, snaring more poor victims. It's like a bloody virus.
There must be something in the site rulings that allow for phishing accounts to be frozen until the rightful owners contact the site. Which is half the reason it takes 13 wks to empty an account, I guess.
I'm sure the site's onto it, but until then everyone needs to remain vigilant and know what to look for. The person(s) behind this may never actually get caught - in person - and can set up totally unrelated accounts as easy as 1,2,3.
So all we can do is keep stopping them. ASAP. :)
Forgot to say - IT'S IN EVERYONE'S INTERESTS TO RESTEEM POSTS SUCH AS THESE.
So that everyone gets to see the warning. C'mon guys.