Spammers are using the MySpace brand in a phishing attack on music fans, a major security vendor reported today.