That's very scary, Dan! Glad you figured it out so quick and took steps to protect yourself.
When I get any emails purporting to be from PayPal needing update info. I close the email and use my own link to get to the site to check it out. I'm paranoid. LOL