I've been noticing a lot of phishing emails lately. It was my belief that in order for them to successfully steal your information, you had to follow their link and sign into whatever page they have.

Some of the "fine folks" offering services for this say all they have to do is get the victim to open the e-mail, nothing more.

What's the truth?

You either login your information to someone's custom built page or simply open their e-mail?