Personally, I am very careful to observe where the sender is from, the wording of the email and the attachments it contains. If it is suspicious or attempted fishing, I immediately refer it to the IT Security Unit for follow-up. On the other hand, I am renewing my passwords quite frequently with an adequate level of complexity. Thank you so much.