Some people on my email contact list have been receiving phishing emails that appear to come from someone else on my contact list. The people receiving the emails and the person purportedly sending the emails are not themselves contacts.
If people on my contact list were receiving phishing emails from my account I would just conclude that my email was hacked, but what should I make of the fact that the emails are coming from this other email? Specifically, is it a "known" procedure for attackers to send phishing emails to a contact list, pretending to be someone else on the same contact list? I guess the attacker's assumption is that people on the same contact list will know each other?