Barracuda Networks found that HTML attachments were malicious more than double than the next leading type of file.

If no menu bar appears when you open the PDF file, you can change the PDF's properties in Acrobat to show, or "unhide," the menu bar by default.