File Attack Deep Dives
3 parts, in reading order.
Part 1
How File-Based Attacks Land: A Detection Engineer's Field Guide
A practical taxonomy of how malware and phishing arrive as files, why classic controls miss them, and how detection should think.
Part 2File Attack Deep Dives: HTML as an Attack Surface
Every way an HTML page attacks: smuggling, external fetches, QR handoffs, phone callbacks, credential phishing, job scams, and AI prompt injection.
Part 3File Attack Deep Dives: Office Documents as an Attack Surface
Every way an Office document attacks: macros, remote templates, embedded objects, hyperlinks, QR handoffs and invoice fraud, plus the signals that catch each.