Check out this very cool paper. It's about context aware phishing attacks. It shows how the information posted by people on social networking websites like MySpace, Facebook, etc. can be used to make phishing attacks far more effective.