The study is discussed on CNN.com. I would have thought the number would be more like 4 in 4. The 70% success rate of phishing messages is even more disturbing. Granted, phishing attacks have gotten a lot more sophisticated, but still; people shouldn’t get online and conduct sensitive transactions if they don’t know how to tell whether or not they are on the right sites.