Spoofed emails "from" Booking.com

[Pickles]

Just as a warning for those who use Booking.com to make or to receive bookings: over the last month or so, first one then another of our email addresses have received several emails purporting to be from booking.com. Some of the emails have been as if we had made bookings: others as if we are owners receiving bookings (which we aren't): in all cases they claim to be confirming bookings, and all have a .zip attachment. Examination of the headers reveals the emails to have been spoofed, and gmail's antivirus detects malicious code in the .zip attachment. I do not believe that these result from use of Booking.com's site and are not the result of hacking attacks on their system: they have come to addresses that have never been used with booking.com.