There is now a new way to make you think you are on an official site and you must enter your information.
A site can now open a tab without your knowledge (for those who have never more than one tab open, ca va, ca noticeable ... but for those having many more ... it's that difficult .. ). If you do not notice this tab, javascript, set to activate within minutes or even few hours later, change the icon, the title and the page and tab to look like a site known as gmail example.
Then you return to your computer later, see that tab open, you suggesting that inactivity on the site will disconnect you and you now need to reconnect. You enter your username and password and voila, they'll have!
Be careful!