A new phishing attack uses corrupted Word docs to bypass security, luring victims with fake payroll and HR emails ...