The essence of phishing is taking advantage of user trust. This attack exemplifies that in every form. Even advanced users may be caught off guard by this scheme. Make sure you check your address bar!
Some good news is that users running NoScript, Safari or Chrome don't seem to be affected by these iterations of the attack.
Example of concept is here
