If you get an e-mail message supposedly from Apple asking you to confirm your iTunes ID and password, DO NOT CLICK ON THE LINK! The link does NOT go to an Apple website. You WILL get something you never wanted, especially if you give away your Apple ID and password.
Apple - in fact, no reputable company - will ever ask you to verify your ID and/or password or any other personal or financial information by e-mail. If you need to make sure that your ID and password are good, go directly to the company's website and login. That will verify your ID and password.
Below is the exposed content of the phishing message. Notice that the link for "Verify now" goes to "lookslikedesign" and not Apple. Always hover over links to confirm their true identity.
We just need to verify that the information account belongs to you. Simply click the link below and sign in using your itunes ID and password. To complete the process, click the link below.
Verify now > <http://lookslikedesign.com/blog/Update.Your.Credit.Card.OnlineINFO.USIP343.12.675.18%20/apples/>
This link will expire three days after this email was sent.
Extend our this request, it's likely that another user has entered your email address by mistake and your account is still secure. If you believe an unauthorized person has accessed your account, you can enter your account information at My Apple ID <http://lookslikedesign.com/blog/Update.Your.Credit.Card.OnlineINFO.USIP343.12.675.18%20/apples/>.
Copyright Š 2015 Apple Inc. 1 Infinite Loop, Cupertino, CA 95014, United States. All Rights Reserved.