This is a phishing email designed to exploit the recipient’s curiosity rather than fool the user into believing it is from a business, colleague, or other legitimate sender. This is also a good example to show that not all spam comes from sketchy domains. In this case, the email seems to have come from a compromised .edu email account, but attackers can also spoof the from address to impersonate almost anyone. Please DO NOT reply or open the attachment. If you have done so already, please let us know immediately. If you haven't, please delete the email or mark it as junk and ignore it.