Today I had a malware reunion with a friend which name was used in the From field of a spam.
I don't know if I should warn her about a potential security breach on her computer. Here is the situation. The apparent emitter of the email is a fabricated email address first name
. last name
@ some boring domain.sg
, but the other 19 recipients are people in her contact list. Has she necessary been compromised, either by having her email password stole/guessed or a local malware, OR is there a way that her contact could have been rebuilt another way (maybe using one of those contacts compromised host). How is this usually done ? This eventually leads to some sketchy binary option / trading website, localized for my country. And this also poses as a "Sent from my iPhone" email.