This attack technique is called "real time phishing". If you need a diagram or a more detailed explanation, look it up