There is an e-mail circulating extensively, if my account is any indication.   It appears to be from ‘The Ohio State University’ with the subject ‘news’. The content is simple (note that URL has been modified to render it unusable):

“Please read our latest news and information: http://webmail.osu-edu.xxx/et cetera. Ohio State University ”

When the user clicks on the URL, an exact copy of the OSU Webmail page displays.  If the unwitting user types their username and password, the credentials are harvested immediately.

Do not click this link or respond to this email message should you receive it.