The scam, which relies entirely on browser-based deception rather than malware, has already been linked to more than 36 fake domains designed to steal banking and card details from unsuspecting users ...