My boss sent me an email asking me about a virus he got.
He said that the attachment had come from his very own address. I called our email hosting provider. They said there had been a spoofing attack. They wiped my boss' email account and restored his old mail.
attachment address email provider attack boss account mail