In the past few hours, a high-volume phishing scam, purporting to be from Bank Negara Malaysia, has hit inboxes. That is it a scam is without doubt: the outgoing addresses are all, in common with many such scams, .edu addresses. They contain a PDF file, BNM.pdf, as an attachment which does not trigger anti-virus warnings when it is delivered to inboxes.