News tonight has a buzz-word new to me:
"It also scours your hard drive for new e-mail addresses to send the same bogus message. These messages, like the one you got, are "spoofed" to appear as if they came from PayPal."