HTML and archive attachments
Attachments that open a fake login page locally or install malware.
How to spot it
- .html/.htm attachments
- Zipped invoices from unknown senders
- Password-protected archives
What to do
Do not open unexpected attachments; confirm with the sender by phone.
What the real thing looks like
- Expected PDF invoice from a known vendor via the usual process
Try an example
A practice example with fictional companies. Answer it, then see the tells.
What do you do?
FromFrom: Northwind Medical Supply - OrdersSender address: orders@northwind-orders.example
Tome
Order confirmation and delivery form
Hello,
Your order is confirmed. Please open the attached form to choose your delivery window.
- Attachment: Delivery-form.htm (9 KB)
Test yourself on eight more
The free quiz mixes scams with legitimate messages, like real life. No sign-up.