Most malspam contains a malicious URL these days, not file attachments
Most malicious email spam (malspam) sent in the first half of the year has contained links to malicious files, rather than file attachments, according to telemetry gathered by cyber-security firm Proofpoint. More precisely, 85% of all malspam sent in Q2 2019 (April, May, and June) contained a link to a malicious file download, rather than the actual malicious file attached to the email.
Link: Most malspam contains a malicious URL these days, not file attachments
via www.zdnet.com