If you suspect an attachment is malicious, do not open it. Instead, report the email to your IT department or use your email provider's built-in reporting tools. You can also delete the email and block the sender. If you accidentally open a malicious attachment, disconnect from the internet immediately and run a full system scan with your antivirus software. Consider informing your contacts to prevent further spread.