Re: Bye
It is not that unusual for an employee to get an email about tickets to an event or something similar which looks legitimate at a skim. It is not like one is going to look at the email header or verify every sender in large organization, if it feels legitimate then some will respond.
Part of the problem is DDE is an Office 'feature' that has probably outlived its usefulness by a couple of decades. But Slurp will not deprecate it in new releases as it breaks backwards compatibility even if it is security risk.