Af Miss D but the catch is the bug was only known to the mass phishing world since Monday and allegedly some sites have still not done the fix
It's just mind boggling that some sites chose to use freeware to protect personal information incl passwords. It's the equivalent of your bank getting its locks from a boot fair
Also seems to be a
for Microsoft as their equivalent lock is OK