Phishing is where bad guys trick you into getting your secret information. And they are getting trickier. They are still a step ahead of the software, though the new Internet Explorer is a bit better. It is a game of catch-up. Here’s an article to read on avoiding getting caught.

Not Your Average Phishing Scam - Security Fix
One of the first phishing scams to catch Security Fix’s eye in the new year — a counterfeit Amazon.com login page — may set the tone for the sophistication of online schemes involving fake bank and e-commerce sites in 2007. The bogus site, which was active as of early Tuesday morning, makes use of the real Amazon.com site in an effort to fool visitors into entering their real usernames and passwords.

This type of trick, known as a type of “man-in-the-middle” attack, logs the user into his or her account at Amazon.com, then it displays the data that Amazon serves up once the user is logged in. Visitors who supply bogus or otherwise incorrect usernames and passwords are shown a copy of the page Amazon users normally see if they mistype either of their credentials.

leo.am: Leo Laporte’s KFI Radio Show Notes

Click here to open the image. Press the stop button on your browser to stop the image from moving once it is loaded. That is the little “X” icon in the toolbar (usually).