Banks, on-line retailers, gaming and social networking sites potentially at riskA bug found in all major browsers could make it easier for criminals to steal online banking credentials using a new type of attack called "in-session phishing," according to researchers at security vendor Trusteer.