Digi phishing email

Email received from Digi

I have received a email from Digi on 17 Nov 2016 claiming that one of my account has an overdue amount and needs to be paid otherwise it will be terminated. And the mobile service has been suspended.

I then check with my payment history and realized that the account number matched and has been fully paid and terminated.

So i suspect this is a phishing email but i can't see any button which can be clicked to download a document to infect the system. Further more this email was sent by the official Digi email address as it can be seen here.



As a result, i sent a reply to them asking for further advise but instead i get a reply saying that my email cannot be delivered because their mailbox is full. However, i can see the download click now which can infect my computer if click.



Now i can confirm it is a phishing email but the question is how did they obtain my account & correspondence from Digi database?

Maybe Digi has some knowledge about it....