Only the stupid fall for phishing?
At least I used to think so. The old phishing attacks we used to get were pretty easy to spot. The spelling was bad and the presentation was aweful. However, the perpetrators have been getting more sophisticated, and employing sneakier methods.
Take this email I just received. It warns me that my Commonwealth Bank account is about to expire. Now, I’m not a Commonwealth Bank customer, but a lot of Australians are. I would be surprised if some of those customers didn’t fall for this one. The email looks geniune enough.

If I follow the link, the Web site itself actually looks exactly the same as the Internet banking login page (minus a few minor differences) for the bank.

I wonder how many of their customers will fall for this one? I think a few will, and that’s all they are banking on.