Security teams have discovered a new instant messenger (IM)-based phishing attack aimed at stealing the account information of users of the popular social networking site MySpace.