Not an IT problem
Despite the general trend of comments here emphasising the technical aspects, this is not really an IT problem at all.
One has to ask why unsolicited emails responding to a non-existent recruitment drive got opened at all, let alone their attachments.