TrendLabs: Powload Loads Up on Evasion Techniques

Figure 1. Example of a macro-enabled document used in Powload attacks. Clicking the “enable content” button will cause the macro to be executed.

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/powload-loads-up-on-evasion-techniques/