Phishing Office files and CVE-2017–11882 exploits still active in 2025, exposing unpatched systems to malware.