File hosting services misused for identity phishing