No, he should not open the attachment and buy the medicine. Because the e-mail might not be reliable and the medicine is not confirmed by the scientists. If a medicine that is not confirmed by the scientists, this might harm those people who are consuming the medicine. He should also cannot trust that kind of message easily, he needed to check if it is reliable before consuming it or introducing it to other people.
Huey Wen and Elizabeth.