Only open up attachments from the vetted and trusted supply. When unsure, talk to the alleged sender immediately. When the sender is non-responsive or vague concerning the context, it might be greatest to presume it absolutely was a phishing try and report it directly to the IT and/or the safety tea