The new weapon of choice for phishing gangs appears to be the establishment of fake blogs:
Websense said it had seen examples of some computer criminals creating a legitimate looking weblog, loading it with keylogging software or viral code, and then sending out the address of it through instant messenger or spam e-mail.
“These aren’t the kind of blog websites that someone would stumble upon and infect their machine accidentally,” said Dan Hubbard, Websense’s research director. “The success of these attacks relies upon a certain level of social engineering to persuade the individual to click on the link.”
Just great. So now, just as every netizen has to be suspicious about their e-mail, they must now be skeptical about any new blogs they come across.