I came across a blog by ESET's director of technical education Randy Abrams earlier today, where he claimed that PayPal had confirmed that its own email is phishing.