The third step in creating a phish is Email Attachments.

• Note that this is an optional step and does not need to be included when creating a phishing simulation. 

• The Email Attachment is a spoof attachment that can be attached to your simulation. This can be used to test if a user downloads an attachment. 

To add an attachment, simply follow the steps within the following article:

• What are 'Email Attachments' in phishing simulations?