3025
The virus had been introduced onto the network from a spam email that had come from a cloned email address imitating a department issued email address .
 phishing: had come from
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 phishing: had come from