Angvlar Security Awareness
Safe handling of email attachments
Evaluate unexpected files without opening potentially harmful content.
Why this matters
File names and icons can be misleading. Even familiar document types may contain links or active content, while archive files can hide the true extension.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Unexpected file or archive
- Double extension such as invoice.pdf.exe
- Macro-enabled Office format
- Password-protected archive with password in same email
- Request to enable editing or content
- File type does not match the business context
What to do
- Verify the sender and purpose independently
- Do not enable macros or active content
- Use approved preview or scanning tools
- Check the real file extension
- Report suspicious attachments
- Use secure file-sharing platforms for expected documents
Frequently asked questions
Are PDFs always safe?
No. PDFs can contain links and active content.
Should I enable macros if a document asks me to?
Not unless your organisation has a verified, approved business need.
Why are password-protected archives suspicious?
They can prevent automated scanning.