Save email attachments from suspicious source locally.

Always manually type a URL into the address bar, regardless of the sender.

Do not engage with any URL that is not verified by you as official or is legitimate.

Do not click on links in emails or messages.

Do not open attachments from suspicious sources.