So far, in the attacks using this new variation on clickjacking, hackers lead potential victims to a phishing site first.