I got this by email tonight:
You can’t be too careful. The ‘Click Here’ link goes off to a php page citing Ottawa, and the sender, far from being Apple, shows up as a local (i.e. xtra.co.nz) email address – probably hacked.
Drop me a line if you’re a security researcher and you want a copy of the full email with headers etc.
I don’t take this stuff personally – just like I don’t take the threats and abusive stuff that’s directed my way by obviously upset, frustrated people who appear to have a capacity to dish it out which isn’t matched by their ability to take it.