Alright, so I need help figuring out this whole thing.

Last night, I got an email from Yahoo that seemed real. In my sleep-deprived, insomnia stupor, that's what I concluded, anyway. The email basically detailed the changes that will happen with Yahoo Groups. It also gave me a link I could click on to download my Yahoo Groups activity. Not wanting to miss out on some nostalgia, I clicked it. I got an automated confirmation email that said I'd receive the file soon, and that was the end of it. Or so I thought.

After I gave it some thought, I realized I may have made a terrible mistake and fallen for a spoof email. When I checked the email address it came from, it wasn't entirely random, but it didn't say "yahoo.com," either. It was like . . . "[email protected]" or something. You can see it in the screenshots.

I immediately set out to change my password. I couldn't figure out how to do it, so I looked it up via Yahoo Help. I tried getting the job done both on my laptop and in the app, but it was futile. For the desktop (laptop) instructions, it told me to click "Change password" in the Account Security page, but that option isn't there. When I tried to do it via the app, the instructions told me to enter some kind of security code, but there's no place to do that, and I don't have a security code. I even disabled my browser add-ons, and that didn't work.

I've checked my bank statements, emails, notifications, etc., and nothing seems to be out of place or missing. Yahoo Help also said that legitimate Yahoo emails will have a square purple logo in the "From" field of your inbox. A sign-in notification email from Yahoo had a round purple logo, as did the automated email. The original email had nothing.

Did I fall for a spoof mail? If so, how can I change my password, when none of the Yahoo Help instructions are working?

Help!!