Aza Raskin describes a new style of attack
If you also click on his link, you will see it in action.
The initial Aza Raskin page: (I am copying and pasting the screenshots here)
Once you click on a page it changes your tab to a “Gmail tab” favicon (the little icon on the tab) by itself (after 2-3 sec)
So the thing is the second Gmail tab is now on the hacker website. If you enter gmail userid and password – they have it now.
In fact just set up Tw0factor Authentication(2FA) on Gmail now.