As always, don’t open random emails—it’s a smart practice in general, but especially if they claim to be from Johns Hopkins University or some random COVID-19 testing facility.

If you do open an email from an unrecognized address, don’t click any links or download files.

And no matter what, never open up a spreadsheet you weren’t expecting to receive.