> Before doing that they see the list of attachments they are including, so this is a very visible attack. Depends on the client. I use claws-mail and I can't

> Before doing that they see the list of attachments they are including, so this is a very visible attack. Depends on the client. I use claws-mail and I can't replicate this (not sure if maybe I'm doing it wrong), but I did note that if there were attachments, I wouldn't see them by default without clicking the attachments tab in the compose window.