Security analyst sides with Mitre, describes flaw as ‘fantastic win for phishing campaigns.’