You can educate, without expressing specific details of the attackers. The usual practice is to warn of potential issues, not publicise a specific attack, and

You can educate, without expressing specific details of the attackers. The usual practice is to warn of potential issues, not publicise a specific attack, and then say "beware!" -- In fact the article didn't even give the common advice of 'check url, https, etc' to avoid phishing.