The solution to such problems isn't just technical - if you see a mail from someone that sounds out of character like in your case, best is to contact them directly or via a fresh mail composed to their address to confirm what was sent. Other examples are receiving an attachment from a known person with just a one line 'check this out' or sometimes nothing. Social engineering attacks always trump technical hacking and tend to be more successful.