This is a slightly scary development - using the "invisibility" of Flash content to search engines and other parsing tools to hide that fact that you're visiting a phishing site.

Hopefully the corpus of smart users will flag these sites as quick as they get up and running and so the browser, ISP, mail and search engine filters will be able to kick in and protect the less savvy masses.

In the meantime make sure you warn all your friends to follow some really simple rules to avoid phishing traps - a bit of education now will save you a whole lot of grief when they get sucked in.