It's not even that. The one we have at work was basically, here is the file you requested, with a link to some file sharing website link to a pdf file. Except if you looked at the address it wasn't even the right site. I got about 10 emails today with the "here you have" subject line, as well as 2 emails from people screaming not to open any suspicious emails. Yet I keep getting them..