Here's an example of spammer attempts at "lulling" an end user into a false sense of security, using a harvested email address list from friends or associates. This happens all to often.

 

Key Points:

  1. The Display Name (Jordi Boyle) is known to the recipient, increasing likelihood of opening.

  2. Email address for Jordi is wrong

  3. .zip file attachment ( or other archive, or .pdf or document such as .doc .docx .xls .xlsx )


Should have Spidey-sense tingling.