We recently had a spate of emails arrive at work, some claiming to be from RBS and some from Santander.
My curiosity got the better of me, so I saved the attached Word document, brought it home, and studied it on a Linux machine.
It turned out to be rather easy to pull apart, but rather difficult to piece together and understand.