A few very dumb merchants were tricked into giving scammers their usernames and passwords. The spoofers then picked off details of recent transactions, including first and last names, mailing address and e-mail address.

This, of course, lead to phishing the new targets, which lead to more targets, which lead to… You get the picture.

Is it possible to protect yourself from your own users? Heaven help us all.

See for yourself at Internet Retailer.