I recently got a nasty email containing two files. I didn't open them but did check and realised they were not docx files which was the intent but on gmail in the document preview it shows what looks to be word documents. Is this a security flaw in the preview system for gmail. Attached is an image


  • Are you sure that is gmail's preview and not an image or html sent by the phisher? – AndrolGenhald Jun 13 '18 at 1:37
  • I can download the file to my Google Drive. It's definitely not an added image – user3012481 Jun 13 '18 at 1:47
  • Are you sure these aren't .doc files? – Neil Smithline Jun 13 '18 at 2:01
  • Google Drive recognises them as an unsupported file type. I'm not at home I can't open on a virtual machine – user3012481 Jun 13 '18 at 2:32

The .docx file does not look at all fake. It's just a document. The content may be indeed something like a dangerous link or something similar, but that has nothing to do with the actual .docx and it's preview.

| improve this answer | |

Most probably, those attachments aren’t attachments—they’re embedded images designed to look like attachments that link out to a fake Google sign-in page.

Below is a screenshot of gmail phishing attack where the attachment is not a pdf file but an image:

Picture of an embedded image that looks like an attachment

| improve this answer | |
  • This is also a possibility. – Overmind Jun 13 '18 at 5:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.