A Year's Worth of Phish Phacts

Brian Krebs' blog, A Year's Worth of Phish Phacts," covers phishtank.com, a volunteer site that accepts possible phishing email and sites from users and analyzes the information. It appears that most phishing sites are hosted on US based computers that have been compromised. An annual report is available.