5 Min Security: Popular Phishing Techniques in 2017/2018

This short non-technical briefing outlines common phishing and Microsoft Office exploitation techniques used to deliver malware and steal credentials—DDE payloads (CVE-2017-0199/8759), malicious PowerPoint actions, credential-phishing via attacker-hosted resources, and a 17-year-old memory corruption bug (CVE-2017-11882) that can yield immediate remote code execution—along with visible cues and recommended mitigations such as blocking risky attachments and using VirusTotal.