But by using the read-only technique, the attackers have eliminated the need for victims to be social-engineered into entering a password to open the encrypted Excel file.

"Your encrypted Excel file won’t be changed, even as you change the encrypted Sheets file," it added.