Warning: New Phishing Scam Using Corrupted Word Files

Warning: New Phishing Scam Using Corrupted Word Files

A New Cyber Threat Has Emerged

Picture this: You're going through your emails and spot what looks like an important document from a trusted contact. Without thinking, you open the attached Word file... and just like that, your business security is compromised.

With AI making cyber attacks more sophisticated than ever, criminals have found a clever new way to bypass even the most advanced security systems - using corrupted Microsoft Word files.

How This Scam Works

Here's the dangerous part: When you open one of these corrupted files, Microsoft Word helpfully "repairs" it, showing you what appears to be a normal document. But hidden inside is a malicious QR code or link that directs you to a fake login page - often disguised as Microsoft 365.

• The file bypasses security filters because they can't properly scan corrupted files
• The document looks legitimate after Word "repairs" it
• Clicking the embedded link takes you to a convincing but fake login page
• Entering your details gives fraudsters access to your systems

Why This Is Serious

Just one compromised account can lead to:

• Unauthorised access to sensitive customer data
• Your team being locked out of essential files
• Fraudsters using your email to target your contacts
• Significant financial losses
• Legal consequences
• Long-term reputation damage

How to Protect Your Business

Whilst cyber attacks are becoming more sophisticated, protection starts with awareness. Here are crucial steps every team member should follow:

• Pause before opening attachments or clicking links - even if they seem urgent
• Be especially cautious of emails creating urgency - fraudsters use this tactic to make you act without thinking
• Verify suspicious emails with the sender through a different communication channel
• Never trust an attachment purely because it looks professional

How Clyk Can Help

Through our Cyber Campus platform, we help businesses:

• Identify security blind spots with personalised training
• Test employee awareness with simulated phishing emails
• Monitor for exposed credentials on the dark web
• Keep teams updated on the latest security threats

Remember: Your team is your first line of defence against cyber attacks. With the right training and awareness, they can help keep your business secure.

Want to learn more about protecting your business from the latest cyber threats?

Get in touch with our team today.

‍