'Tabnabbing' attack can steal passwords

A top Firefox programmer has figured out a scary new way to carry out phishing attacks, this time using browser tabs. Aza Raskin, who was appointed Firefox's creative lead in March, has designed a JavaScript-based social engineering exploit that replaces one page with a mock-up of another while the victim is distracted elsewhere. The attack could be used to harvest user names and passwords for banks, email accounts, or any other type of web site. The trick relies...