Thanks for the detailed write-up, Tannin, must have taken a bit of time to write that up!
The other day I read about a nasty Bank SSL Trojan; it intercepts SSL traffic, replaces the bank logon screen with a local copy, captures your ID/PW and saves it, then passes them on to the real bank...