AA can do nothing. It's not phishing as it isn't diverting you to a site pretending to be AA. It's just a method being used to deliver some malware payload if you do click on the zip file. Could be keystroke logging, zombie, back orifice, virus or whatever.