Mail sent out via this plugin?

I got a phishing mail just now asking for my credit card numbers looking like it was sent from a big bank and it seems that this plugin somehow is involved as X-PHP

http://wordpress.org/extend/plugins/cardoza-facebook-like-box/