There's been an uptick in phish purporting to come from department heads or even higher that containing an attachment or link to online document.  The hope is to get the recipient to react quickly and open or link to the document.  Always double check the sending address and give thought if this message is something you would expect from the sender.