Fake document shares
The email claims a file, invoice, or HR document is waiting. The link usually leads to a lookalike login page or a download that starts outside the official service.
Urgent account warnings
The message says your account, mailbox, tax profile, or bank access will be suspended. Pressure is used to reduce normal verification.
AI instruction attacks
Some emails include hidden or explicit instructions telling automated tools to ignore policies, reveal secrets, or treat malicious content as trusted data.