Brian Krebs | Washington, DC | March 16

Washington Post - Automated Tools Gather Victims' Keystrokes, Upload Passwords to Illicit Database

When Graeme Frost received an e-mail notice that an expensive digital camera had been charged to his credit card account, he immediately clicked on the Internet link included in the message that said it would allow him to dispute the charge. As the 29-year-old resident of southwestern England scoured the resulting Web page for the merchant's phone number, the site silently installed a password-stealing program that transmitted all of his personal and financial information.

Funny story for y'all. Someone tried to phish my Dad the other day. Good thing he called me and forwarded me the email because he was two clicks away from getting hosed. People phishing from Pay Pal spoofs are the worst. But there is an easy way to prevent that: Pay Pal will never ask for important info via email. They will only ask once you log into the site. And for safety's sake: never click on an email link to Pay Pal. Always type it in: www . paypal . com.