He was socially engineered in-by trusting who was thought a buddy to open a file; who which was maliciously a actor for the N.Korea. I've been a SysAdmin for god-long time, so thank you for respectfully telling me that I am not, when I am full well aware of what I am talking about.

He was socially engineered to open a file. It wasn't Abbacada 123, poof your hacked. It was his fault, he opened the file and that makes him foolish of him to "trust" and open a file.

End result, he got himself infected with an exploit.