Microsoft VBA is a modern-day dialect of BASIC, the original easy-to-learn-and-use programming language for beginners and experts alike. It is built into many Microsoft applications, notably the components of Microsoft Office. VBA malware isnt self-contained, but instead acts as whats called a downloader. The VBA simply goes online, connects to a server under the control of the crooks, and fetches a malicious.EXE file without asking you.”]
Source: https://news.sophos.com/en-us/2015/09/28/why-word-malware-is-basic/