BofA is the same people (actually, another bank did this as well), that sent me this e-mail... yes, it's true... yes,it's legit. But..... yeah
You have received a secure message from Bank of America
If you have concerns about the validity of this message, please contact the sender directly. Messages will expire after 90 days.
Opening the Secure Message
Click the securedoc.html attachment to open (view) the secure message. For best results, save the file first and open it from the saved location using a Web browser.
First-time recipients may need to register after opening the securedoc.html attachment.
Existing recipients, enter current password. CashPro Online recipients, enter CashPro credentials.
Click the Open button. If you are unable to open the message, select the Open Online link.
Mobile Device Recipients
Forward this message with the securedoc.html attachment to firstname.lastname@example.org. You will receive a new email containing a link to access the secure message.
If you have not previously registered, click the Open button to initiate registration.