[reginold]

How would it construct a page that has the verified image if it doesn't know what the image looks like?

[lmm]

It would construct a page that includes a part that's genuinely verified (so the browser displays the verified image) and a part that's malicious, but arrange it so that it looks like the verification goes with the malicious part.