3 ms·

I broke into your e-mail and need to get you to force a password reset on some other account, so I maliciously modify to give you an invalid stored password.

• jokamoto 11y ago
  If the attacker already has control of the email address, they can reset the account without going to such lengths--just visit the site and request a password reset.
• negus 11y ago
  Could you please provide more details on suggested attack?