In message , Sacha
writes

I received another email, with unopened attachment, from a friend who was
working in Cairo.

From him or 'apparently from him'?

I checked with him and he hadn't been in touch with me
yesterday. He's going to contact his secretary in Cairo and get her to
check if there have been any shenanigans with regard to his computer.

As we've said these emails usually come from another machine that uses
someone elses address they find to make it look like it came from them.

anyway you are on a mac aren't you, so are going to be immune anyway
from all these windows things, even if you were to open one.

--
Chris French