Jim Hamm sends this link from MacWorld, and says, "Here's an article about a new 'phishing' attack on Apple customers. The moral of the story here is never click on a link in an email to update anything where a password is required. Always go directly to the website from an address you enter into the browser."