If you've got the "Always show my e-mail address" setting under your
profile set as "yes", it may be worthwhile considering setting it to "no".
It appears than recently, an email harvester (probably a bot) has obtained some members' email addresses from the
memberlist. No breach of security occurred or was necessary for this as some members choose to have their email addresses publicly viewable (see the first paragraph above).
From the information I've received, it appears that spammers have been sending viruses to members using a faked "from" address which makes it appear that the email has come from a fellow board member. Beware that you should never trust for certain that an email comes from the person named as the "from" person. This can very easily be faked. You need to check the
headers.
Be careful out there!