According to BFMTV the author of the email used a fake account that passed through a server in the US. Investigators believe the sender was based in Syria.