Low to medium computer literacy

The show: Medium
The episode: "Will the Real Fred Rovick Please Stand Up?" First aired last Friday on CBS.
What happened: For some reason, almost every man looks like Diedrich Bader to Allison. (On the IMDb, the actor Diedrich Bader is identified as playing the character of Fred Rovick, but in a very real sense, Bader also plays Joe Dubois and Detective Lee Scanlon in this episode, as well as quite a few other characters). This complicates Allison's work on a murder case, because even though she dreams the murder, both the murderer and the victim look the same to Allison (both are played by Diedrich Bader). Allison is still able to give sufficient information to the police to catch the killer. Eventually, Allison figures out that the reason that the reason so many people show the same face to her is that they're the people who've fallen pray to an identity fraud scam perpetrated by the man who actually has that face, the real Fred Rovick. Near the end of the episode, Lee and Allison figure out that the scam was perpetrated by sending out e-mails spoofing the city, claiming that the recipient's voting district had changed. People who opened the e-mails allowed a program into their systems which stole their private financial information, allowing Fred Rovick to clean out their bank accounts.
What doesn't quite make sense: Just reading an e-mail is not enough to inadvertently install Trojan malware on your computer. You have to take the step of downloading the infected attachment. For what plausible reason could an e-mail titled "Your voting district has changed" have an attachment? If such an e-mail is legitimate, all that it needs to tell you is what your new district is and where the polling location is; both these things can be accomplished with plain text. Maybe a legitimate sender would include a JPEG with a map of the new district and polling location; you can't put Trojan viruses in a JPEG.
Now, a video is starting to stretch it, but it is plausible and videos can contain Trojan viruses. However, the episode doesn't say that a video was attached to the fraudulent e-mail, and in fact makes it sound like the mere act of reading the e-mail infects the recipient's computer. But consider also the human factor: if you get an e-mail telling you your voting district has changed, how likely are you to delete it without even reading it? I doubt many people would fall for it. In the episode, Allison deletes the e-mail without reading it because she knows the city's computer systems have recently experienced some malfunctions. But even without that knowledge, Allison's reaction to the message seems perfectly realistic to me.