You may have received emails from a company other than Apple which may appear as though they're from the iTunes Store. These messages are not from Apple, and often contain malicious attachments or links to non-Apple websites. Do not enter your account information on any non-Apple website. Do not open any attachments from email addresses you do not know. If you believe you've received one of these malicious emails, please forward the message to
reportphishing@apple.com. For more information on legitimate Apple emails, see Identifying legitimate emails from the iTunes Store. This article describes what steps you should take if you feel your account information has been compromised due to an attempt to take your personal information (known as "phishing").
More from Apple OS X Support ...