Full description here:

http://archives.neohapsis.com/archiv...4-08/1092.html

but the short version is:

Never login to any sensitive site by clicking on a link in an email.