A VBA self decoding technique is being used to hide the malware on impacted systems.