That tactic has been around for a while. 2 years ago I got caught when I got an email asking (actually through ebay) "Is your item like this one?" It had a clickable link and when I opened it, I also got another log-on screen. I thought it is odd since I was already logged on but I filled it out anyway. It went no where. Shortly after that someone logged onto one of my auctions and deleted most of the bids with just under 12 hours left to the auction. He didn't change my password, but I could no longer edit or stop the auction. It was a mess to clean up, but ebay emailed each of the bidders to let them know I was hacked and it wasn't me who did it.
Verne