A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...