3 ms·
It wasn't "a basic e-mail" but a zero-day exploit inside Excel .
It wasn't "a basic e-mail" but a zero-day exploit inside Excel .
Which would have been useless without a means to get a mark to open a malicious file in Excel.
The real problem is Excel executing embedded flash. Without that, the exploit has no purchase, or at least would require an additional step from the user.