From: Caravan & Camper Megastore Midland <email@example.com>
Date: Mon, 5 Jun 2017 16:13:03 +0000
Subject: Financial Advice
- Financial Advice 2345555.pdf
Please find attached Financial advice document for your review
Let me know if you need any further assistance
Technical AnalysisThe attachment is flagged as suspicious by VirusTotal
This is a relatively new trick. When you open the PDF, you are presented with a login screen. After entering your login and password, you get to see the PDF. Meanwhile your details are forwarded to the hacker.