We scan all incoming mail, even from our own website. Spammers(and worse) love to abuse web pages, especially those with online forms. I see this particular piece of malware blocked, at least several times per week. I'll have to check the logs to see if it's coming from our HR forms/online apps.
Innerestin’.