The basic structure of a phishing attack involves an attacker who sends e-mail messages to many recipients who might have an account at a targeted Web site. Explain how a phishing attack could be used to perpetrate identity theft. Include a brief description of countermeasures that might prove effective in thwarting such an attack.