Old thread - but this appeared to be an appropriate posting. My wife gets this email below from "yahoo". She doesn't even have an account - but they are reporting an login from Nigeria - and want her to "change" her password. Of course the sender address shown is not even from a yahoo domain, and the "yahoo" hotlink is to some obscure site with hongkong in the URL:
