Phishing emails are notorious for shady attachments. If you receive an email that is unexpected or from an unfamiliar name, and it has an attachment or link - alarm bells should be sounding! If there is a "sense of urgency" to go along with it, you should really be on red alert. Cyber criminals want you to act against your own better judgement by making you feel that you have to click on something right away! Never click a link or attachment if you can't confirm it is safe. Contact the sender via an alternate route to confirm if you should in fact be receiving an attachment or link. If in doubt NEVER click!