I have received many such emails... from phishers.

They usually have a link or attachment that delivers the malware.

If the email really came from the airline, that might be your first clue your account was hacked.

Go to the real airline website and look in My Trips. Or phone the legitimate 800 number and ask.