Richard received an email from a person claiming to be his childhood friend, Kate. The email address is unknown to Richard, but thesubject says that it is Kate's newemail address. It also has an attachment, which according to the subject, is a childhood picture of them.

What steps should Richard take to verify the authenticity of Kate's new email ID? How should Richard make sure that the attachment is not malicious?