Just received this email today. I made no such request and will not be opening the attachment. United would not use the same password for every user. This can’t be real or if it is, it was sent in error and with no clue about security.
did anyone call UA and ask?