O'Reilly Network has an excerpt from the book Security and Usability that deals with phishing and user interfaces. The article is a good introduction - nothing that couldn't have been written a year ago, but a good introduction just the same.