Our code would of filtered any such attempts to embed anything in the email. There is no opportunity to attach files to that message and no way to enter malicious code. In addition, any (non-encrypted) file with malicious attempt should be filtered by your email host unless they encrypt it. Never enter passwords on files in your mailbox and its generally a good idea not to open files unless you confirm who sent them to you.s.
There is NO risk to any users due to this email unless you message her with the email within the message and then do what they tell you to do.
My biggest advice to you about ALL E-Mails, is NEVER assume an E-Mail comes from the person who it says sent it and never open any file within an email.