While performing online banking using a Web browser, a user receives an email that contains a link to aninteresting Web site. When the user clicks on the link, another Web browser session starts and displays avideo of cats playing a piano. The next business day, the user receives what looks like an email from his bank,indicating that his bank account has been accessed from a foreign country. The email asks the user to call hisbank and verify the authorization of a funds transfer that took place. What Web browser$-$based securityvulnerability was exploited to compromise the user?