Such a user, could then go to https://steemsuperwallet.org/ website, where he or she would download a trojan which would stole all their funds.

Good point- that is sketch.