ORIGINAL: Historiker
I get these emails almost daily. If you look at the URL, you'll see that it isn't paypal.com, but something else. When you add a radom email and password, it'll accept both and ask you for further details inside.
This way, they get the account data of anyone not attentive enough. But that has nothing to do with your email account being hacked. Getting those emails only means that your address was either crawled on a website or by a trojan thorugh a hacked accound that recieved emails with lots of open visible CC-Addresses. (That's why you always put recipiants (if more than one) into BCC...)
The notification with and E-mail to reset my password legitimately came from PayPal, but they were questioning it, as the hacker couldn't answer a secret question. [X(]
