These fake login alerts don't send you to malware-websites. Instead, they attempt to start an email-based back-and-forth in the hopes that you'll give up your credentials, Malwarebytes warns.