Only open up attachments from the vetted and trusted source. When doubtful, talk to the alleged sender immediately. When the sender is non-responsive or obscure with regard to the context, it would be ideal to think it absolutely was a phishing attempt and report it directly to the IT and/or the sec