04-04-2017, 05:00 PM
We got emailed that at work yesterday - seems like it's catching a few people out. One thing you can do to protect yourselves is to disable javascript from running in PDFs (usually disabled by default but worth checking) and obviously not downloading any attachments from any email regardless of whether you trust the person (accounts can be compromised or spoofed to look like they're coming from a legitimate sender). If you aren't expecting an email, contact the person by another means to confirm they've sent you an attachment (Facebook (eugh), phone, etc.) before opening it.
Some mail clients are better than others at detecting spoofing, but they're not all 100% going to work, so vigilance is important.
Some mail clients are better than others at detecting spoofing, but they're not all 100% going to work, so vigilance is important.