Phishing: Sophisticated new phishing technique targets Yahoo users

According to Websense Inc., a Web security software firm, a sophisticated new phishing technique targets users of Yahoo by recording their user name and password while logging them into a legitimate area of the portal.

Info World reports that users receive an instant message or e-mail purporting to be from a friend wanting to show photos from a vacation or birthday party.

The message has a link to the phishing site, which records the user's ID and password while forwarding the user to the real Yahoo Photos site.

Ironically the phishing site is hosted in free Web space provided by Yahoo Geocities service in the U.S.

Yahoo officials were not immediately available for comment.