So i'm taking a computers for business class and the teacher did a lecture on how everyone on the interent is trying to steal from me. One thing he talked about was phishing. What I don't get, and he couldn't really answer, is that phisherman(phishers?) use websites to mimic legit sites to get you to give them your info to steal your credit card info. But you need a credit card to buy a website. So are these guys using their own credit card and just preying no one does a WHOIS lookup? It seems kind of like a catch 22 otherwise. They'd need my credit card to make a site to steal my credit card.