Just people causing trouble and most likely spreading a virus. If you do see such a message just delete the message, DO NOT OPEN IT! No friend would sent you one of those, and if they did, would no longer be a friend of mine. If anyone does see such a message, report it immediately to Nicola or Gav.
I'm now glad I have email filtering on my email account so I don't get things like that. And if it does happen on Lush your browser itself may flag it, and lets hope everyone here is smart and some sort of web security on their computers.
Ah so that's where they got your email account more than likely. Just ignore them. If you do open the photo it will alert them that your account is valid and active.