Email hacked..... What to do

The way this malware works is basically the following:

1. The malware is introduced as part of an email, typically that looks like it from someone you know.
2. The email would, in most cases, include a link to click on ... but not all do and just by opening it may be possible for the malware to "infect" that recipient's device. Similarly, replying to this email would provide the malware originator with your email address ... which, in turn, they may start sending malicious emails to.

This issue is more common with Windows-based computers, and not with Macs ... but Macs are not impervious to malware/adware.

A few things that you can do at this point:

1. Try using Malwarebytes for Mac or EtreCheck to locate, and remove, any malware "infections" on your Mac. Do not use dedicated Anti-Virus apps on your Mac for this as they tend to cause more issues than resolve them. Besides, Macs to date, do not get viruses.

You didn't mention what email provider you received this message on. Regardless, you will need to be more diligent going forward to look for other potential malware messages coming your way. If it is an iCloud email account, I strongly suggest that you change your Apple ID password immediately. Manage your Apple ID - Apple

As far as your friend, if they have a Mac, then the same info I provided you would be a good start. If, instead, they have a Windows PC, then it's a "whole different ballgame" on what their next steps would be.

Regardless, the following may come in handy:

• If you think your Apple ID has been compromised - Apple Support
• Phishing & Other Suspicious Emails - Apple Support
• Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

I don't use or recommend any dedicated AV apps for Macs, especially those that run in the "background." I do use ClamXAV on my Synology NAS, but only for that.

As BobTheFisherman has pointed out, EtreCheck is a diagnostics tool. It is not a dedicated AV app but can, in a number of cases, help identify malware or adware and assist with its removal. On the other hand Malwarebytes is an anti-malware app. It can be argued that is could be called an AV app, but I suggested it as it can discover forms of malware/adware that can "infect" Macs. I use it proactively on occasion to look for any issues, if I suspect there may be any. It is available on a trial basis. During the trial, it will default to run in the background continuously monitoring for potential malware infections. (This is why it could be considered as a typical AV app.) You can then decide, whether or not, you want to purchase it after the trial is over OR let the trial-version expire and continue to use it as a "free" version. The only thing is that it will no longer run in background and you have to run it when you want to check for infections. Regardless, it will be fully functional either way.

Do not install any third party app that claims to clean, protect, manage, boost performance, etc. Etrecheck is a diagnostic troubleshooting tool.