That exploit has been going on for long time, if not years, it's just that it requires decent skills to perform it.
I also have my JavaScript disabled everywhere to prevent being hijacked/phished,...