I was clearing out spyware and trojans from a computer the other day, and one of the things I found in the windows\system32 directory was html files and everything needed to make a front for an online banking system.

I imagine this was supposed to create a fake login screen in IE with https and everything intact in the URL.

these bastards are getting very sophisticated and usually people are not tech savy enough to stay clear of this.

About the phishing emails, people will always be tempted to click links in their emails, some people read slower and will not look at the address bar and padlock every time.

The Nigerian scams will also work until people will stop being greedy. Somehone will always be ready to get a quick buck by helping some poor Nigerian guys out.