SCAM ALERT: GRUMPYCAT PHISHING POST!! @simplymike account hacked?

Checking Steemit a few minutes ago and I was surprised to see @simplymike's account with a very low reputation. After checking recent activity, it became clear that this was due to a series of downvotes by @blacklist-a and @steemcleaners.

But this is very uncharacteristic of @simplymike, judging by the history of posts and the active participation provided to the #newbieresteemday initiative.

What is happening?

1. The downvotes from @blacklist-a and @steemcleaners seem to be the result of @simplymikes spam posting a certain comment over the last 40-50 minutes.

See the following image:

2. This is the offending comment:

WARNING: THE COMMENT IS A PHISHING ATTEMPT.

Clicking on See more brings you to a fake website:
https://steemil.com/abuse/@grumpycat/...

^ Notice it's steemil instead of steemit!

3. @simplymike's account was hacked after he fell prey to a comment left by @kilbride on his post.

If you go to @simplymike's post 7 DAY B&W Challenge - Entry 2, you'll see that @kilbride left that exact same phishing post.

This was 1 hour ago.

4. Shortly after that, @simplymike's account was updated (looks like password was changed), recovery account updated and then he started posting the phishing posts.

Everything can be found in the blockchain.

For now, everyone should take measures to protect themselves. Make sure you check the websites before logging in to prevent your account being stolen!

If you clicked on the post and logged in, change your password using Steemit immediately!!

Edit: You can help by resteeming this post to help protect other users' accounts from the same hacker.

Update (9th March 2018): @simplymike managed to get the account back. See this post about the experience and security lessons everyone should know on Steemit and in protecting your cryptocurrencies in general.