A friend in Sweden got the same. "Upgrade to Electrum 4.0" (and let us steal all your money). electrum.org should maybe have a warning for this but they have no adress where I can contact them...
The webpage says right at the top:
Warning: Electrum versions older than 3.3.4 are susceptible to
phishing. Do not download Electrum from another source than electrum.org, and learn to verify GPG signatures.
The "phishing" link goes to the github issue discussing the prolem... and the fact that it was fixed.
The website also has links to github:
https://github.com/spesmilo/electrum where you can use the issues register to contact the devs
and also a link to their twitter:
https://twitter.com/ElectrumWalletFailing that, PM
ThomasV here: