Mandiant: Some hackers are going the extra mile when trying to compromise computers and call victims on the phone to advance their phishing attack. Some malware attacks attempt to trick victims into enabling macros, which Microsoft disabled by default long ago in its Office applications due to the security risks they pose. Social engineering has long been used to trick people into divulging sensitive information or into doing something that gives an attacker an advantage. Attackers have cleverly created their own bogus Google applications to get inside email accounts or stores of shared documents.”]
Source: https://www.bankinfosecurity.com/blogs/hello-you-please-enable-macros-p-2416