I have seen on another forum running VBulletin a user posted two posts on separate threads. You go to that thread and you get a pop up asking for you to confirm your user name and there password. Though it was not a pop up from the site. It was a person Phishing.

Now he had a weird signature and it is suspected that it popped out somehow from his signature. Does anyone know how this could have been done?