Welcome to Thatz Not Okay, a regular column in which I school inquiring readers on what is and is not okay. Please send your questions to caity.weaver@gawker.com with the subject "Thatz Not Okay."

Oh, no! Erotic photobloggers and magazine interns everywhere were rocked with the news today that microblogging service Tumblr was the site of a prolonged "phishing" attack that seems to have stolen thousands of Tumblr logins and passwords. How will we ever be able to trust our favorite dogs-wearing-human-clothes…

Some Chinese hackers may have been reading top U.S. officials' email for a while. Google says they've thwarted a phishing campaign that targeted the Gmail accounts of politically sensitive targets.

We're living in a scammer's paradise: Here's a site selling 50 million AOL addresses for just $500. And $300 for 1.5 million farmers' email addresses. A perfect way to start your own phishing business!

Yesterday I fell prey to the dreaded Twitter phishing scam. All my contacts receiving a direct message: "haha. This is you??? [clickableURL]" Now my inbox overfloweth with "Let's catch up!" emails. Who knew spambots could make a girl so popular?

Oh no! There's a site which tricks you into handing over your personal information for its own nefarious, moneymaking schemes! It's called Facebook. Oh, also, people are all upset because FBstarter.com is stealing their passwords.

Officially, Facebook is treating the onslaught of viruses piggybacking on the social network's popularity as a very, very serious matter. We're talking Sheryl Sandberg serious. Facebook's press statement reads: "We are investigating every report, removing false content, blocking bogus links and addressing the…

Facebook CEO Mark Zuckerberg should be relieved to learn that someone is at last "leveraging the social graph," as he might put it, for financial gain. Problem is, it's not Facebook. It's hackers pulling a phishing scam. A tipster tells us his friends at Facebook are busy fighting a virus that tricks a user into…

He's only 24 years old, but Michael Dolan of West Haven, Conn. has been slapped with the maximum sentence after pleading guilty to fraud and aggravated identity theft. Dolan and five accomplices spammed AOL users for four years with messages such as, "Due to a central server meltdown, your credit card information…

A security company that crawls the Net turned up personal information for between 100 and 200 users of Apple's MobileMe email service, stored on a server used by phishing scammers. By contacting victims, investigators at CardCops learned that they'd fallen for this week's unusually convincing MobileMe scam. Which…

MSNBC.com did not report this morning that in a long-anticipated move, Microsoft has acquired AOL. But after finding the above "MSNBC Breaking News" alert in my inbox this morning, I thought they did for a minute there. I even started drafting a post on the news ("Last we heard about the deal in mid-July, AOL…

A Macworld reader sent in a screenshot of a charmingly credible HTML email that claims to be from Apple: "We were unable to process your most recent payment. Did you recently change your bank, phone number or credit card?" It's convincing not just because it's pretty, but because this sort of error from MobileMe at…

The latest email phishing attacks reveal a new tactic: Rather than go after lowest-common-denominator suckers, savvy frauds are going after executives and other big-money targets — "whaling" in security-speak. A recent attack appeared to be a subpoena for a San Diego District Court case, with the attached file…