By that time the hapless user has been shunted back to the real Web site, but the hackers have what they want: access to your account.

• 这时倒霉的用户回到了真正的网站，但是黑客已经拥有进入你的银行账号所需的东西。