Malware gang uses .NET library to generate Excel docs that bypass security checks | ZDNet
The OOXML spreadsheet documents generated by Epic Manchego lacked a area of compiled VBA code, unique to Excel documents compiled in Microsoft’s proprietary Office environment software package.
