I got the same message yesterday. It was to an address I don't use for AA. It didn't look like any AA communications I've ever seen. The content was far from complete for anything AA would send. AND it showed a travel date for which I am not in the air.

Spammers are trying anything to trick people into taking the bait and click on the attachment. Personally, I don't even let Yahoo load images until I have had a chance to decide if I feel it's safe. Web beacons may not contain viruses, but can signal a live address, spammer gold! That's one status I don't wish to earn.

The most creative I've seen so far has been a parking ticket notification from NYC. Who's not going to want to prevent being ticketed by mistake? It's up to you to keep your guard up and not fall prey to these scammers.