2 days later I got an email from the original "sender" saying their email account had been hijacked and to please not click on any links from the recent emails. I bet IT security didn't have to do extra training... 😂