Re: "only requires the user to enable macros"
Agreed.
And if you do open the attachment, don't try to run the executable.
And if you do try to run the executable, don't click yes on the obvious warning that appears.
(on Windows, where I imagine most of these things are happening)
... they basically have three attempts to not be stupid and yet somehow people still manage it. I almost think that there should be fines handed out to these kinds of people just as much as the malware groups.
It is these kinds of people that are directing companies towards making computers, less and less flexible, just to try to protect their carelessness.