16. A system for analyzing electronic messages for phishing detection, comprising: one or more recipient's/recipient organization's email servers; one or more sender's email clients; one or more recipient's email clients; Intranet or Internet; a database; and one or more anti-phishing servers coupled to the database, and further the one or more anti-phishing servers coupled to the one or more recipient's/recipient's organization's email servers, the one or more sender's email clients, and/or the one or more recipient's email clients via Internet or Intranet, wherein the email client plugin module attaches to one or more recipient's email clients and wherein the anti-phishing server comprises: a processor; and a memory coupled to the processor, wherein the memory comprising a anti-phishing module, wherein the anti-phishing module comprises an import module, an analysis and data warehouse module, a mail handler module, an organizational analysis module, an outbound mail relay module, a configuration and management module that are configured to: receiving an email message from one or more sender/sender organizations by one or more recipients/recipient's organization via the mail handler module; obtaining email characteristics by parsing the received email message based on a set of predetermined email characteristics by the analysis and data warehouse module; comparing the email characteristics of the received email message with email characteristics associated with the recipient/recipient organization and/or that sender/sender organization by the analysis and data warehouse module; and declaring the received email message by the recipient/recipient organization as a phishing electronic message based on the outcome of the comparison by the analysis and data warehouse module; wherein the email characteristics are selected from the group consisting of network path used to reach a recipient/recipient organization, geography associated with IP address, email client software used by the sender/sender organization, email client software version used by the sender/sender organization, date, day of week, time, time period of the email, time zone of the sender/sender organization, presence and details of digital signatures in the email, meta data present in header portion of the email, character set used in content of the email, format of the email, email length and subject length, character case of the email, character case of the subject, style of introduction at the top of the email, style and content of the sender/sender organization's signature in the body of the email, other recipient/recipient organizations included in the email, to, and copy circulated (cc'd) email addresses, sender/sender organizations name, sender/sender organizations from and reply to email address, senders organization name, senders domain name, sender's organization's Domain Name Service (DNS) settings including SPF records, sender organization's mail server information, including server ip address, sender/sender organization server network path, sender/sender organization email server software and software version, DKIM signature, spam scoring from spam software, message ID, volume of email sent by the sender/sender organization, volume of email sent by sender's organization, volume of email received by the recipient, volume of email received by recipient organization, details associated with URLs or attachments in the email, whether the recipient/recipient organization has responded to this specific email, and number of interactions between sender and recipient associated with the email and the like; and wherein the configuration and management module allows an administrator to select desired email characteristics to be included in the set of characteristics used for comparing the characteristics of the received email message and to assign a weight of how much each characteristic should influence the likelihood that a new message is a phishing message.
16. A system for analyzing electronic messages for phishing detection, comprising: one or more recipient's/recipient organization's email servers; one or more sender's email clients; one or more recipient's email clients; Intranet or Internet; a database; and one or more anti-phishing servers coupled to the database, and further the one or more anti-phishing servers coupled to the one or more recipient's/recipient's organization's email servers, the one or more sender's email clients, and/or the one or more recipient's email clients via Internet or Intranet, wherein the email client plugin module attaches to one or more recipient's email clients and wherein the anti-phishing server comprises: a processor; and a memory coupled to the processor, wherein the memory comprising a anti-phishing module, wherein the anti-phishing module comprises an import module, an analysis and data warehouse module, a mail handler module, an organizational analysis module, an outbound mail relay module, a configuration and management module that are configured to: receiving an email message from one or more sender/sender organizations by one or more recipients/recipient's organization via the mail handler module; obtaining email characteristics by parsing the received email message based on a set of predetermined email characteristics by the analysis and data warehouse module; comparing the email characteristics of the received email message with email characteristics associated with the recipient/recipient organization and/or that sender/sender organization by the analysis and data warehouse module; and declaring the received email message by the recipient/recipient organization as a phishing electronic message based on the outcome of the comparison by the analysis and data warehouse module; wherein the email characteristics are selected from the group consisting of network path used to reach a recipient/recipient organization, geography associated with IP address, email client software used by the sender/sender organization, email client software version used by the sender/sender organization, date, day of week, time, time period of the email, time zone of the sender/sender organization, presence and details of digital signatures in the email, meta data present in header portion of the email, character set used in content of the email, format of the email, email length and subject length, character case of the email, character case of the subject, style of introduction at the top of the email, style and content of the sender/sender organization's signature in the body of the email, other recipient/recipient organizations included in the email, to, and copy circulated (cc'd) email addresses, sender/sender organizations name, sender/sender organizations from and reply to email address, senders organization name, senders domain name, sender's organization's Domain Name Service (DNS) settings including SPF records, sender organization's mail server information, including server ip address, sender/sender organization server network path, sender/sender organization email server software and software version, DKIM signature, spam scoring from spam software, message ID, volume of email sent by the sender/sender organization, volume of email sent by sender's organization, volume of email received by the recipient, volume of email received by recipient organization, details associated with URLs or attachments in the email, whether the recipient/recipient organization has responded to this specific email, and number of interactions between sender and recipient associated with the email and the like; and wherein the configuration and management module allows an administrator to select desired email characteristics to be included in the set of characteristics used for comparing the characteristics of the received email message and to assign a weight of how much each characteristic should influence the likelihood that a new message is a phishing message. 21. The system of claim 16 , wherein the mail handler module quarantines emails determined to be phishing emails, wherein the configuration and management module forwards quarantined emails to certain users, wherein the configuration and management module adds certain text to the header or subject of quarantined emails to mark them as suspect, and wherein the configuration and management module outputs the quarantined emails for viewing on a display device.