...hosting the malicious JavaScript. That could be accomplished by sending a fraudulent e-mail from the person’s banksaying he should to click on the link, which launches the JavaScript, said researcher Petko Petkov, in the same video. ...
http://www2.csoonline.com/blog_view.html?CID=33475
...Bob wishes to impersonate Alice. If Bob can convincingly sign messages as Alice, he can send a message to Alice's banksaying ``I wish to withdraw $10,000 from my account. Please send me the money.'' To carry out this attack, Bob generates...
http://www.rsa.com/rsalabs/node.asp?id=2281