I just received an email from an unknown person, titled "da vinci" and containing a docx file with the same name. Not suspicious at all, right?
I have not opened or downloaded the file, but:
- The email has been downloaded by the Gmail app in my Android phone (probably including the attachments).
- It has been "read" by the app, in order to show me an Android notification about it.
- Once in the Gmail app, I have opened the email myself (not the .docx). The only text it contained was "Scanned by Avast" and some url. The app also showed me a small snippet preview of the Word document.
Is it possible to get infected this way? My guess: yes, but not very likely.
- From the notification itself: yes, if the email body somehow exploits a vulnerability in Gmail's app or in Android. (Is there such a thing? Is this answer still valid?)
- From the Word attachment: I guess again yes, if it somehow exploits some vulnerability in the Gmail snippet function.
- Assuming the .docx actually was a virus, I guess it would focus on Windows and Word, not in some Android / Gmail vulnerability, right?
In this specific case, I've already deleted the email, should I do anything else? Reboot the phone or something?