I received an email at work the other day from a client (with the correct email address) that had a pdf attached. When I opened the pdf, it said the client had required the recipient to login to outlook in order to view it. I attempted to login and the only thing that happened was the Google homepage opened automatically in a new tab. Forty-eight hours later, our work email was hacked.
I inspected the html associated with the icon (posted below) and it actually turns out it is a png. Further all the https addresses in the chunk of code had no flags on VirusTotal. I was hoping to find an exe file or some url to a malicious site that would indicate any potential malware but there does not seem to be any.
How can I further look into this to see if this was the problem with the work email?
