Recently, a lot of phishing campaigns have been moving the embedded links from the body of an email into an attachment, to increase the odds of evading detection. We theorize this is a kind of “social engineering” ploy to move the user along quickly and get them into a clicking