You right on top of things. I have had a few people's accounts get hacked in and I received the "famous" link.
Thank goodness I have learn't not to click on urls
And now I do not keep contacts in my email due to the fact of the concern of my account being hacked into and the hacker sending ALL my contacts a virus.
Yes, it is a big PAIN to recreate email addresses, but the only contact I have is the email address for my OTHER email
This is what "clued" me into the fact that my account had been hacked into - I received an email from one account to the other. And here I was thinking I had forgotten my password. They had even changed the account to which my account info was being sent to - my secret word and so on. NEVER had this happen, but learn't from the experience.
ALWAYS use a "very" long password to protect your account and mix it up with letters (capital,lowercase), symbols and numbers. Harder to remember but does help to keep you from being hacked.
Thanks for looking out for us.