Trust People, Not Addresses
Don’t trust unsolicited files or embedded links, under any circumstances. It’s easy to spoof e-mail addresses, so that an e-mail seems to come from someone other than the real sender (who may in any case be a spam tool rather than a human being). Basic SMTP does not validate the sender’s address in the…