IL too don't understand. It may not be malicious at all if someone unknowingly sent her an attachement and it contained a virus. Seems she doesn't have her security set up right.

Anyone can send anything it is up to you to protect yourself from a mistake or a malicious happening.