There's been so much scam email going around lately claiming to be invoices or late payments or similar where the distinguishing characteristic is that the attached file is an Excel spreadsheet. I haven't investigated to see if that's malware in addition to fraud, but I'm pretty sure I've never gotten a legit bill in the form of an Excel document (not without that at least getting converted to a PDF or something first). I've just been promptly deleting those.