I initially dismissed them as phishing spam until the attacker changed my EA account email address to theirs and changed my ...