Malicious attachments and links remain the main payload delivery method for ransomware and credential theft.
Mistake 1: Allow-listing partner domains and bypassing scanning entirely#
Why it hurts: this undermines email attachment and link security at the point where mailbox providers make their decision, and it is rarely surfaced by your own tooling until placement drops.
Fix: Block executable and macro-enabled attachment types at the gateway.
Mistake 2: Password-protected archives that evade scanning#
Why it hurts: this undermines email attachment and link security at the point where mailbox providers make their decision, and it is rarely surfaced by your own tooling until placement drops.
Fix: Enable URL rewriting with time-of-click reputation checks.
Frequently asked questions#
Are PDF attachments safe?
Mostly, but PDFs can carry scripts and phishing links. Sandboxing and link rewriting still apply.