Saw in a "latest threats" thread on a security forum that there are a few of these around. One takes the form of an E-Postcard. The suspicious text includes words like "a family friend" or "a colleague" or "relative" has sent you blah blah.
Once opened, it harvests all email addresses on the users email program, then resends itself.
Your crime is having friends with lax security protocols. Shame on you!