Beware that corrupted email attachment: It could be a scam

Cybercriminals never stop finding new ways to slip past your defenses. Their latest trick? Corrupted Microsoft Word files—and if you’re not paying attention, you might fall for it.

Here’s how it works: They send what looks like a normal email—maybe an invoice, a supplier update, or a request from a colleague. The attachment? A Word file that’s been intentionally corrupted.

Your email security scans it and can’t detect anything malicious, so it lands in your inbox. When you open it, Microsoft Word “repairs” the file and displays what looks like a normal document—but hidden inside is a malicious QR code or phishing link.

Click it, and you could end up on a fake Microsoft 365 login page, handing over your credentials to an attacker. And once they’re in, one stolen password can be all it takes to access your entire system.

Cybercriminals are always evolving. The question is—is your business ready?