This is why I use Gmail. Although I've never been caught by a phishing attempt (and probably never will be) Google actually take action to help people. People get caught out, and Google force password resets, thus ensuring the problem does not remain open for too long.

What do Microsoft do about their Hotmail accounts that have been targeted....?