Cutting-edge phishers are creating websites in Flash to evade detection by toolbars, security experts said this week.