If security experts have said it once, they've said it 1,000 times: don't click on or download strange email attachments.
http://www.pcmag.com/article2/0,2817,2498535,00.asp