It’s been a rough day for Gmail. After a lengthy service outage this morning, Gmail is now being attacked by a phishing scam that is spreading like wildfire.

I became alerted to it when I received IMs from three people I hadn’t talked to in some time within a matter of minutes – one a marketing exec at a prominent startup – with typical phishing jargon “check this out!” with a link to a tinyurl that when clicked, points you to a site called ViddyHo. Apparently, the site sends out the message to all of your Google Talk contacts.







I’m a bit surprised this scam is taking off (and feel sorry for my friends that fell for it, who I expected better judgment from!), because the site itself is so crude and doesn’t even tell you what you’re going to get for entering your credentials. Nonetheless, people are falling for it, and will likely continue to do so until word spreads far and wide (which, it’s starting to do through Twitter).

In any event, if you’ve fallen for the scam, be sure to change your password, as who knows what else ViddyHo has in store for you.