Email attachments are a normal part of business communication. Invoices, documents and reports are exchanged every day, which makes attachments attractive delivery mechanisms for malicious content.
Do not trust the filename alone
A file that appears to be a PDF or document is not automatically safe. Filenames can be misleading and file contents may behave differently than expected.
Unexpected attachments deserve caution
An unexpected invoice or shipping document from an unfamiliar sender should be verified before opening.
Macros and executable behavior
Some documents may request that users enable additional functionality. Requests such as “enable content” should be treated carefully.
Why are archive files used?
ZIP and similar archive formats can hide multiple files or be used in attempts to bypass simple filtering.
Safe practices
- Verify the sender.
- Do not open unexpected files.
- Report suspicious messages.
- Avoid executing risky content on unprotected devices.
For broader warning signs, read How to Identify a Phishing Email.