Bitcoin Spear Phishing the greedy

Spear-phishermen are aiming for your wallet. At first glance, it may look like you could score someone else's wallet because some noob sent the wrong person this message. All you have to do is download his wallet and, BAM, you can transfer his coins to your wallet. Not so fast... You would be giving out an IP more likely to have a wallet of it's own, and the goo.gl would download a zip archive, which I suspect if you opened it would be some sort of malware to hack your system for it's coins.

As you may notice, I changed identifying details.

""" Hello YYYYYY…

I just did what you advised me to do but the problem remains the same : importing the private key is not working…. drives me nuts! Last time I checked blockchain.info ( https://blockchain.info/address/XXXXXXXXXXXXXXXX ) there was still XX.XXXXXXXXX BTC ! But no way my bitcoinqt client loads the key so I am stuck with those BTCs.

Thanks for offering your help with this. Here is my wallet.dat with the password http://goo.gl/XXXXX. If you need anything else let me know. If you can load the key please send the BTCs to VFVFFVFVFVFVFVFVFVFVFVFVFVFVF

This would help me so much. Thanks YYYYYY!

ZZZZZZ"""

The href of that blockchain.info pointed to a different url http://campaignbird.com/click/BNBNBNBNBNBNB and the goo.gl resolves to a zip file at a .nl domain.