Help me please as fast as you can please

You are working as a security analyst in a company xyz that owns the whole subnet range of 23.0.0.0/8 and 192.168.0.0/8. while monitoring the data, you find a high number of outbound connections. you see that ip's owned by xyz (internal) and private ip's are communicating to a single public ip. therefore, the internal ip's are sending data to the public ip. after further analysis, you find out that this public ip is a blacklisted ip, and the internal communicating devices are compromised. what kind of attack does the above scenario depict?

In which part of a professional email should you try to be brief, but highly descriptive?

In my email i got a message it says a quick message and in message details on who its from its says nicole and under nicole is [email protected] -