BizSugar.com › Technology › New Phishing Attack Targets Online Banking Sessions With Phony Popups | timesofitsecurity.com

The so-called "in-session phishing" attack prompts the victim to retype his username and password for the banking site because the online banking session "has expired," for instance, via a popup that purports to be from the victim's bank site, according to researchers at Trusteer