Our paper, Why phishing still works: User strategies for combating phishing attacks, in the International Journal of Human-Computer Studies, is now available as a free download from Elsevier until August 3.
http://authors.elsevier.com/a/1RB~V3pfaRP32X