I was almost caught by this - they use your usual subject lines, and tailor the attachment to look legitimate.
Be really careful about opening email attachments!
https://www.wordfence.com/blog/2017/01/gmail-phishing-data-uri/?utm_source=list&utm_campaign=011217&utm_medium=email
Veronica