Help Net Security: Even though the data gathered by Microsoft points to the fact that cybercriminals now prefer deceptive tactics to exploits, it does not mean that the latter approach has been wholly abandoned.
Malwarebytes’ Jerome Segura reports that emails with attachments that are not malicious executables but regular documents that have been exploited are still a big thing.