Browser in the Browser (BITB) Attack
Wow - after 20 years of phishing variants, I've finally seen one that I'd 100% fall for.  The rise of pop-up auth dialogs is something I've kinda just taken for granted as more and more platform-native apps make use of them - I wouldn't even blink if it happened to me in a browser window (until now).