ah, the good old days of MySpace when you'd get a bulletin saying "I'm sorry I didn't post all those things, my account was hacked", followed by someone else posting "I just registered on this site and got a free PS3....you can too".
Always check the URL if you're asked for a username+password. Air is free. Nothing else.
I'm sure people are already trying to phish Facebook accounts, but I think its a million times easier on MySpace.