general warning about LJ phishing email

[substitute]

I got a pretty good-looking "LJ Support" email claiming my password had been changed and that my new one was attached. Since it was an obvious phish I went through the headers. They appear to have managed to bounce it off LJ's mail server somehow, although it originates at someone's cable modem.

In any case the "attachment" is the usual trojan horse in a zip file that will no doubt do something ugly to your Windows machine.

Don't touch it; it's evil.