How to Spot a Browser-in-the-Browser Phishing Attack

Single sign-on windows can be faked.