789
However , the dummy app still managed to fool users because Google ’s own account permission page never plainly listed the developer ’s information , unless the user clicks the page to find out , Parecki said .
 users: victim; the dummy app: trusted entity
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: phishing 
  Option: victim, attacker, attack pattern, purpose, damage amount, tool, time, place, trusted entity 
Text: {0} 
Answer:
 users: victim; the dummy app: trusted entity