The spelling is a red herring. There are loads of far more sophisticated scams out there, with perfect spelling and very convincing use of specific details, e.g. mentioning mutual friends/colleagues by way of introduction. Often the sender details look like they've come from legitimate contacts/organisations.
Moral of the story, beware of everything and never click on an attachment unless you are 100% sure. Especially attachments that you haven't asked for. If they need you to visit their website use your usual url, the one that you would use if it was you initiating the enquiry.