MacOS users have largely been immune from macro malware for years. Attackers created a Word document with embedded macros and a compelling title: U.S. Allies and Rivals Digest Trumps Victory Carnegie Endowment for International Peace.docm Mac users were asked to enable macros when they tried to open the document which, in turn, bypassed Apple’s vaunted Gatekeeper since users gave permission for macro execution. Next the malware grabbed EmPyre, a legitimate Mac and Linux post-exploitation agent that had been modified for malicious purposes.”]