There’s an email scam that’s been making the rounds for over a month now, most recently landing in a bunch of BE folks inboxes.
The scam is a social engineering phishing attempt where by a superior’s name is used (most often from an unrelated email address) to trick the recipient into acting on buying a gift card, urgently.
Unfortunately spoofing emails is relatively easy to do and in no way mean the named senders' account has been compromised.
IS&T has an informational article should you wish to delve further. http://ist.mit.edu/news/gift-card-scam
Contact BE-IT with any questions.