Alias spam email

Hi Guys, Recently our employee receive an email from our co-employee but from different domain name. and it have an attachment, I'm worried because what if it is malware. Any tips or any idea how can avoid this in the future. Note: already block on global filter.