Novel phishing campaign uses corrupted Word documents to evade security https://www.bleepingcomputer.com/news/security/novel-phishing-campaign-uses-corrupted-word-documents-to-evade-security/ (excerpts, follow link for all the details)
A novel phishing attack abuses Microsoft's Word file recovery feature by sending corrupted Word documents as email attachments, allowing them to bypass security software due to their damaged state but still be recoverable by the application.
Threat actors constantly look for new ways to bypass email security software and land their phishing emails in targets' inboxes.
A new phishing campaign discovered by malware hunting firm
Any.Run utilizes intentionally corrupted Word documents as attachments in emails that pretend to be from payroll and human resources departments.
"Scanning the QR code will bring the user to a phishing site that pretends to be a Microsoft login, attempting to steal the user's credentials." (end excerpts)
The bad actors just keep finding new ways to screw with your computer
Keep your anti-malware security softwar up to date
