With real breaches constantly in the news, scammers are sending realistic warning emails to steal login credentials. Here’s how to avoid the trap.