Web applications, such as Yahoo’s email service, Google’s Orkut social networking and PayPal, are becoming increasingly popular, and so are methods used by cyber criminals to dredge for bank account details and other valuable user data.