information security

please explain it

Often an attacker crafts e-mail attacks containing malware designed to take advantage of the curiosity or even greed of the recipients. Imagine that the message body Amy saw in the e-mail from Davey had been "See our managers' salaries and SSNs" instead of "Funniest joke you'll see today." 1. Would it be ethical for Amy to open such a file? 2. If such an e-mail came in, what would be the best action to take