Hackers have leveraged a consolidated technique using Visual Basic for Applications, to conduct the attack. The attackers targeted a feature within Microsoft Word Visual Basic Scripting for Applications. Cisco announced that next week it will provide more information on the group responsible for the attacks, on the exploits used in the offensive, including data on the malware used by attackers and obfuscation techniques implemented. This threat actor seem to target high-profile, money-rich industries such as banking, oil, television, and jewelry.”]
Source: https://securityaffairs.co/wordpress/26421/cyber-crime/cisco-warns-spear-phishing.html