What is a malicious attachment?

A malicious attachment is a file containing or enabling **malware**. Common types include: executable files (.exe, .scr), macro-enabled documents (.docm, .xlsm), archives containing **malware** (.zip, .rar), and files exploiting application vulnerabilities.

Attackers disguise malicious attachments as legitimate: fake invoices, shipping documents, resumes, or business documents. Social engineering convinces recipients to open despite security warnings.

Protection includes: attachment scanning by email security, blocking dangerous file types, disabling macros by default, and user training to recognize suspicious attachments. Multiple layers are necessary because attackers continuously evolve evasion techniques.