By Dan Goodin @dangoodin001
"Masque attack" could expose banking data, e-mails, and other sensitive data.