Everyone, not just employees of large organizations, needs to be on the lookout for dangerous phishing emails. In particular, students and higher education institutions are increasingly targeted with phishing attacks that pose as official business. Beware: while these emails appear legitimate, they contain hidden links to malware. When in doubt, a good old-fashioned phone call to confirm the sender's intentions can prevent negative repercussions.
Further reading: a Wired article on how to handle phishing emails.