A new phishing campaign is underway that pretends to be an alert from your email server that it has received an encrypted message for you. It then prompts you to login to a fake OneDrive site in order to read the message. Once you enter your email login credentials, the attackers will be able to retrieve it later. As always, when receiving emails that lead to login forms, make sure to examine the URL where the form resides before entering your login credentials. In this particular case, the URLs are not associated with a user’s email account and thus should be treated with suspicion.
Source: https://www.bleepingcomputer.com/news/security/phishing-scam-asks-you-to-login-to-read-encrypted-message/