Received an email yesterday (5/7/2011) supposedly from at&t requesting you "reverify" your information, definately a phishing email. I forwarded it to CERT and at&t., beware!
They send you this message indicating that you have received a package and there is an attachment. In the trashcan it goes! Of course I expect that for my Yahoo account sense that's mainly my junk account. All others are forwarded to Comcast's servers.
This utility can be very useful for finding the origin of unsolicited mail. You can simply copy the message headers from your email software and paste them into IPNetInfo utility. IPNetInfo automatically extracts all IP addresses from the message headers, and displays the information about these IP addresses.