In an advisory on its site here, Microsoft confirmed a new wave attacks but said they were very limited. The technique involves a code execution flaw which uses .xls files to launch the spear phishing attacks. Microsoft said that users of other Office applications were also at risk. Office 2007 and Works 2004, 2005, or 2006 were safe.
Of course the only people at risk are those who open suspect .exe files, and Microsoft's sage advice is not to do this. Of course if people didn't open suspect packages or visit dodgy websites there would be no zero day attacks. Pass the parcel would not be much fun either. ยต