Locky virus sent to two Zoho accounts in succession

Locky virus sent to two Zoho accounts in succession

Hi there,

Approximately two weeks ago at least two of the accounts I manage recevied emails with the Locky virus. It appears the emails were sent from the owners' own accounts. I suspect the email addresses were spoofed but I would like to be certain of their origin and be sure that Zoho was not compromised in any way so that I can reassure clients.

I emailed support with the headers of one such email on the 19th and followed up on the 21st but have not had a response.

Please could someone investigate and get back to me?

Thanks