The project itself can be found at https://github.com/danielstjules/blankshield

Looks like this is a "Show HN" then? Neat, though nothing surprising.

I'm confused as to how this differs from your typical phishing attack?

Google has a pretty good description: https://sites.google.com/site/bughunteruniversity/nonvuln/ph...

I think the biggest problem with this attack is that many don't believe it to be possible. And why should they, given the inconsistent browser behavior.