Detected a spear-phishing attempt targeting internal user via a malicious Microsoft Office document exploiting a known vulnerability. The email originated from a suspicious external IP and included a compromised document with a known malware hash.