I notified MagicTux through his support email, and he sent back a useless form letter as a reply.
Hello,
Recently there has been a large increase in the number of phishing attacks that have been made against the users of Mt.Gox.
Phishing involves deceiving users through fake emails or websites into providing their user name and password to the phisher, who then uses this information to log into the account and withdraw as many funds as they are able into their own bank account.
Phishing is another form of Internet crime similar to hacking which has steadily become more prevalent with the increase of Internet banking, shopping and exchange services. We urge our users to be cautious of phishing attacks, not only when accessing Mt.Gox but when providing any personal information over the Internet.
While the following steps cannot protect users completely from phishing, they will ensure that any attempt to steal personal information is far less successful:
-Always check the URL in the address bar of your browser when logging into Mt.Gox. It should read https://mtgox.com.
-Never click on hyperlinks in emails to access Mt.Gox.
-If you are ever unsure of the veracity of an emails contents, contact Mt.Gox Support. We will be more than happy to confirm whether or not the email you have received is authentic.
-Be aware that Mt.Gox will never contact you by email asking for your user name or password.
-Check the security certificate of the website you are logging into. In modern browsers, this can be done by looking at the address bar and checking whether or not a blue certificate appears to the left of the address.
-Mt.Gox will soon implement the VeriSign EV Authentication certificate, which will make the address bar turn green when you are accessing the real Mt.Gox website.
-Use anti-virus software at all times. A number of anti-virus programmes include anti-phishing features which will notify you when you are accessing a suspect website.
We sincerely apologize for the inconvenience our users have suffered at the hands of phishers, and are doing all that we can to prevent further attacks in the future.
Thanks,
MtGox.com Team
I consider this a smoking gun.