Blog Post
Something I automatically do is be suspicious of any email with a PDF on it
It looks like that's the current evolution, common users avoid links but tends to forget about avoiding suspicious files, as if it being a PDF would be meaningless and not harmful, many content creators fell and got their channels hacked via this tactic (fake sponsor contracts)
Good point. Glad you mentioned it. I never open unknown attachments, but it's true, I rarely think about that.
Potentially could be worse than clicking on a link. I mean spam filter, or ISP anti-virus, local antivirus should detect a malicious piece of software, but best not to rely on that. Also if it's compressed (RAR, ZIP etc) it could avoid the above and go unnoticed until opened and too late!