Identifying legitimate emails from the iTunes Store - http://support.apple.com/HT201679
Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams Other Suspicious Emails - https://support.apple.com/HT204759
Forward attempts as an attachment to: reportphishing@apple.com