An email-based phishing scam is attempting to fool recipients into opening malicious attachments disguised as notifications from the U.S. DHS.