This is a new one. In the screenshot below, you will see what looks like an attachment in the email. You would expect that if you clicked on the attachment, either a preview of the attachment should come up, or the attachment itself would open.
In this case though, they criminals didn't attach a word document. They attached an image file, with a link to an external site.
A screenshot of the email is below, along with a screenshot showing what you see when you hover over what appears to be an attachment.
If you had gone to the site, you would have been shown a page trying to appear like the Office 365 login page. They even have the email address pre-populated, like in the image below.
