Cybersecurity experts from ANY.RUN have discovered that hackers are using a new method to distribute malware on Windows PCs through phishing emails containing intentionally corrupted Microsoft Office or ZIP files. This tactic is designed to evade detection by users and antivirus software. The corrupted files complicate the identification of malicious content, as security tools fail to extract any files from them, leading to undetected malware. An example of this phishing tactic includes an email impersonating an HR department, which suggests a salary increase while concealing a malicious Word document and a QR code that may lead to a harmful domain. Users are advised to be cautious with emails from unknown senders, verify sender addresses, and ensure robust antivirus software is installed on all devices. It is also recommended to contact senders directly for verification and to avoid downloading attachments from unknown sources.