I've been watching for and posting about some phishing attacks. I do this to warn and remind. My last was “Scary Chase Online Phish” in which I suggest things you can watch for when in doubt.
Thanks to Slashdot for pointing me to a Harvard and Berkeley study on why phishing attacks work: “Why Phishing Works”.