In the past 3 days, I have had two emails (as far as I can tell, official ones) in response to purported requests to reset passwords.
One was from Apple iCloud, the other from GZ. I originated neither.
Any ideas? All my devices are Apple and are running ESET anti virus (except for the iPhone).