I simply automatically delete EVERY email I receive with an attachment from an unfamiliar email address; ... unless I am expecting an attachment from someone I know, or from someone from whom I've requested information that may arrive in the form of an attachment.