This is a phishing attack.
The attachment has a link to log-in page.
The attachment looks like this.
The link takes you to a phishing site.
Observe that the site address is incorrect.
Correct site address is https://www.onlinesbi.com/
The site is connected to server with normal connection, not a secured connection.
There is no encryption symbol at bottom footer.
So, be careful. Do not open the links given in mail.
