Gunter Ollmann, The Phishing Guide: Understanding & Preventing Phishing Attacks (IBM Internet Security Systems) (2007) (full-text).