Back in the old days it was much, much easier to phish (but we only did it for usernames and shit...never cc info). It was more of a game to see how many people would actually fall for it. Out of every 100 emails or IMs I sent I had at least 15-20 replies!
You'd be amazed at how gullible some people are!
