Skip to main content
2 of 2
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/

Maybe. In theory it might be that the (unknown) mail client you use already extracts information from the attachment when you simply hover over it. And the practice might not be that far away from this theory: There were several bugs in the past where the preview feature for mails could be used to execute malware, see Can malware be activated by previewing email in Outlook's Preview pane? or BadWinmail: the really bad Outlook flaw. There were also code execution in the past triggered by simply hovering over a file in explorer.

Steffen Ullrich
  • 207.6k
  • 30
  • 416
  • 481