The scam emails offer, as proof of compromise, a password associated with the target’s online accounts.
Source: Threadpost