Phishing is a tactic known to malicious hackers ever since the first one crawled out of a swamp and onto dry land. It's another variation on social engineering. The phisher's goal is to get people to open themselves up to technical vulnerabilities through nontechnical means. However, even though most e-mail users have become more savvy about obvious scams, phishing is evolving. Why do phishing attacks continue to work when e-mail users are constantly warned about identity theft? Because phishers go where the money is, just like bank robbers.