Read about this one.. it's actually pretty nasty!
It allows people to fake what displays up in the location bar, while the browser points somewhere else...
TEST here
Read the advisories here
I wonder how long it'll take for people to start using
https://secure-russian-billing.com :/