Mike showed me the phishing email, and it's a rather known phishing/scam/virus that's been circulating in the web for a while and is known to infiltrate your address book and send out phishing emails to your friends. The scam email will look something like
this -- so, if you see anything that looks like that, don't click anything, simply delete it. And there's some concussion on this at this
blog.
Cheers,
...Alex