This time, they are putting sleazy pop-ups in ways where you'll accidentally click on the thing that connects the accounts. They might get away with it, because technically you're giving them consent when you click "OK".