How Attackers Used Look-Alike Domains to Steal $1 Million From a Chinese VC