As Bob said they aren’t from avast.
Spoofing, social engineering emails are nothing new, the only thing that changes are the company names to trick the user.
Users have to be aware that not everything that they receive is genuine.