Secunia – Multiple Browsers Window Injection Vulnerability Test
This is a serious one here, folks. Even in my secure Firefox browser, the exploit works (that is, a pop up window that I opened by clicking on a link did indeed open the Secunia page rather than the Citibank page that was supposed to open).
However, as someone at Slashdot noted, if you open the Citibank page first in a new tab, then the exploit does NOT work. God bless Firefox!