In case it wasn't apparent on the first read (like it wasn't for me until I read @arcange's post), links in comments left by this scammer actually go to a fake steemit site where you are prompted to re-enter your password (at which point they steal it). As the author said, read @arcange's post to learn how it works: https://steemit.com/steemit/@arcange/scam-alert-fake-steemit-website-try-to-steal-your-password