The Phishing Campaign attachments are always sent in a PDF or Docx format.
Phishing Campaign in PDF
When a simulated Phishing campaign PDF is opened by the employee, the following happens:
A Security Warning pop-up appears prompting permission to access the website.
Clicking Allow will redirect you to the Phishing URL.
Your activity will be tracked and counted as (Phishing URL) opened.
Docx:
When a simulated Phishing Campaign Docx is opened in a Microsoft Word native environment, the below pop-up appears. If you select Enable Macros, the action will trigger a user-clicked event.
