Phishers know that salary notices are a very tantalizing lure, which is why they are always a popular theme for phishes and malspam. If you look at this example, there are quite a few signs that this is not a genuine salary notice:
- The subject uses words like “Final Notice” to instill a false sense of urgency
- The email came did not come from a UVic sender
- The greeting is impersonal
- The signature block is very generic and does not mention UVic
- The contact email in the signature block is also not from UVic
- There are a few grammatical errors in the message
Therefore you should not open the attachment, which is actually a webpage (HTML) file containing a phishing form and code for harvesting your username and password.
