I’d recommend checking out this post by River Continua about an impressively sophisticated phishing scam targeted at academics. They’re going to catch a bunch of folks with this one. UPDATE: Apparently this is something that the EPA does that the EPA employee who wrote the original post was unaware of. They definitely need to rethink the composition of the email though as I would have been (and obviously was) equally suspicious.