Phishing email used in serious RSA attack surfaces

[J65nko]

From http://www.theregister.co.uk/2011/08...k_email_found/

The theft of secret data related to RSA's SecurID tokens used by 40 million employees to access sensitive networks likely started with a 13-word email, evidence uncovered through a researcher's dogged sleuthing suggests.

“I forward this file to you for review,” the unsigned email, sent to four employees of RSA's parent company EMC, stated. “Please open and view it.”

[fossala]

That just doesn't make sense.
"Oh a file that I don't know its origin. It's asking me to download the file and open it. Ok then".
Do people not have common sense/training?
:/