Once you download the attachment, it requests you to fill in the Apple ID and password along with their credit card information. The behaviour of the email looks genuine up until this moment but once you have filled your details, the same are sent to a unknown server for further theft. It is worth mentioning that Apple doesn’t have a general public liasion “Security Department” office which can send out such a mail. If you receive such kind of email, do delete it from your system and warn your friends using Apple products about the same.