Suppose there is a small, non-profit, organisation; say a church or music society. They want to communicate with members, for example to distribute minutes of meetings. The members are have varying degrees of computer literacy, but none are IT professionals.
Currently they email Word documents to each other. This implies that they open Word documents received as attachments.
Questions: Would distributing the documents in a different format (eg. PDF) reduce the risk of attack via spoofed emails? Should the society simply not communicate via attachments? To be more specific: my concern is that a spoofed email would contain an attachment containing malware. I don't care that we receive spurious minutes or other communcation; rather I'm concerned that recipients will think they are receiving trusted attachments.