When he opens the message, a spyware trojan embedded in the file will send his GPS coordinates.