Cybercriminals can sneak into online accounts on some of the internet's major platforms .
Without ever knowing the passwords thanks to a few poorly designed features.
According to academics looking into the subject, all they need is the victim's email address, which isn't difficult to obtain these days.
Microsoft Security Response Center experts and independent researcher Avinash Sudhodanan discovered a means to sneak into online accounts
There are a few ways to carry out the attack successfully, but here's the gist of it in layman's terms.
If the attacker has the victim's email address and knows they don't have a service account, they can establish one for them using their email address .