For example, say an unsuspecting visitor gets a link security.stackexchange.com/.... Then it re-opens the login page, with or without an explanation as to why they have to log in again. (this is more likely to be a problem for place like Cooking or Music than a community of Security enthusiasts)
At least in StackExchange there is an extra layer of security in that it takes one more click to get to the Google login.
But other services do not have that. These example pages could have been crafted to submit login information to a third party. Then bring up one of Google's better known error pages and re-word it to say that the service is temporarily unavailable, and to please try again in a couple minutes.
A non-techie user is now hacked. Teaching them about these attacks is going to be incomplete.
But what about automatic ways to detect pages like these?
Is there any screen-shot recognition plugin? Or resource recognition? That IT Security logo for example, is a resource. All the resources could be check-summed, and identified to their domain name. I visit this page often, so it is pretty clear that the logo belongs here, and not on any other sites I visit.
This could warn the user of some of the more simply crafted hacks that are still under the radar and not detected & reported yet.
What is there to know on this subject?