Michael –
No, it was Fred (as I called him) who was compromised. Though that may not mean the criminals had helped themselves to every name and address on his list, including mine, before he discovered what was happening.
This morning a message appeared from the club secretary warning us of it, but saying Fred had dealt with it.
I have seen similar attacks but not quite in that form.
What made me stop were Fred’s Christian name spelled with a small ‘f’ (I discovered later he did that anyway), no salutation, the unexpectedness of the message and its rather odd contents.
I did not consider anything significant in the name Amazon despite criminals so often exploiting that company. I wonder if Amazon is doing anything to help stamp that out?
Testing the message with the’View Source’ tool showed nothing untoward, no secondary routing address, the scam-test verdict “Clean”.