Using Outlook for Android in business environments for email and scheduling
To be safe, I would actually suggest changing your password. Since you clicked on the attachment, please run a virus scan on your PC to check for any malwares. Other than that you should be good.
What does Microsoft do when we do flag the emails as spam or phishing?