>> One suspects that a lot of spear-phishers know about this already. We have seen this attack vector. We have seen key-loggers, as well as crypto-locker Troj

>> One suspects that a lot of spear-phishers know about this already. We have seen this attack vector. We have seen key-loggers, as well as crypto-locker Trojans, delivered in this way. It has been an up hill battle educating staff who view themselves as non-computer people, but we are getting there. Most staff have come to think as safe behind our spam, content, and security filters, and getting them to think critically about whether they should open an attachment has been very difficult. [edit / I press 'submit' too early and my comment was incomplete.]