One interesting feature of the new GodFather malware variant is it no longer uses overlay attacks, relying instead on fake login URLs.