QUOTE(914werke @ Nov 15 2019, 09:31 PM)
SPAM! I have received a bunch of messages from her
Ive even let George know Mia's email had been compromised (yes shes a real person)
Her actual email account wasn't necessarily compromised, although changing the password is a good idea. Spoofing a sender email address is very easy. These clowns (that's a nice way of putting it...) get a list of good email addresses, then send an 'invoice past due', 'refund due', or similar attachment message pretending to be from someone you know. Opening it will at the least install malware on your machine that you may not even notice. At worst, it's ransomware and they encrypt all your files.
Unfortunately it's come down to 'never open an email attachment unless you are positively certain who sent it and why'. If ANY doubt, send a separate email, not reply, asking if they really sent it.