In previous versions of Microsoft Outlook (the classic app), you could view the HTML code of an email by opening the email, right-clicking on it, and selecting “View source” from the context menu.

A new FileFix attack allows executing malicious scripts while bypassing the Mark of the Web (MoTW) protection in Windows by exploiting how browsers handle saved HTML webpages.