URL spoofing. Attackers use JavaScript to place a picture of the genuine URL over a browser's address bar. The URL is disclosed by hovering more than an embedded link and can also be altered using JavaScript. If a seller gets one of these e-mail, they need to open their payment web page inside of a