The Anti-Phishing Working Group reports that it has documented an astounding 55,643 new phishing attacks in April 2007. That's the largest number of new phishing attacks ever in history and a fourteen-fold increase in eighteen months (up from 4000 in October, 2006).

Here's an interesting article on fraudulent use of Google Adwords to plant key loggers on client systems. It's an example of another crafty way that the criminal community is finding to exploit ambiguity about who you're connecting to. In this case the criminals were passing through a site that installed a key logger on the way to the real site. But it's equally easy to imagine setting up a bona fide phishing site or an entirely fake online store/bank/loan site/trading site to do the same thing.

Enter authenticated identity, AKA Extended Validation. Now when you click on an Adword that appears to be from a business you know, you have better methods of verifying that it's truly that business. And if you get scammed by a site...

Here's an article on the newest breed of phishing attack, which disguises itself as a communication on how to protect yourself against phishing.