Login-stealing phishing sites conceal their evil with lots of hyphens in URL

Compromised domains target Android users with fake login pages for cloud services.