Weaponized Word docs, spyware and malvertising sprouting in May