check this out guys - these phishers are hosting a form that looks just like the "you must be signed in to do that!" page on myspace. they just record all the login data for later use. they get you to that page by making a myspace profile that looks like a legit profile, but is actually just a screenshot of a profile that is one big link that goes to their phishing page.

so this is very easy to combat - whenever you are asked for your name and password, just glance at the URL. if it is hosted on myspace, you are all set. if not, obv don't enter your information.

this is how i understand accounts are being phished, and aside from more sophisticated attacks like obfuscated javascript insertion there really is no way to get your details jacked if you take this simple precaution.

remember - tread carefully, the internet is a scary place in 2007!

timjohn