thumbnail No Macro? No Worries. VSTO Being Weaponized by Threat Actors