The old rule of "Don't Open Attachments" isn't enough to protect you from phishing attacks anymore. Here's more up-to-date advice.
From PCWorld:
From PCWorld:
When you hear about a phishing attack on e-mail accounts, it's easy to assume that the victim was just too gullible. But as recent attacks on Gmail, Hotmail and Yahoo Mail have demonstrated, the old rule of "don't open attachments or click links from untrusted sources" isn't always enough to fend off a targeted phishing attempt.4 Security Tips Spurred by Recent Phishing Attacks on Gmail, Hotmail, and Yahoo
Security firm Trend Micro has dissected the attacks to figure out how they worked.