Quite a clever phish today. There's an email in my inbox that actually has a correct mothership signature and even the name of an actual group in the business. Mindy, it seems, needs my help, urgently with the attached deal. Could I take a look?
The attached document is, of course, a double-barrelled doc HTML and her email is not that of the mothership, plus there's no phone or location detail in her signature.
But it looks superficially very bona fide. I came to close to absently clicking it as it's the sort of random request that is usually found treading water in my inbox.