This email comes from PayPal, but it is an attack — what you need to know and do to be safe from these hackers.