O’Reilly Network: What Is Phishing (Or, How to Fight Phishing at the User-Interface Level): “A phishing attack succeeds when a user is tricked into forming an inaccurate mental model of an online interaction and thus takes actions that have effects contrary to the user’s intentions. Because inferring a user’s intentions can be difficult, building an automated system to protect users from phishing attacks is a challenging problem.”