XLSM Malware with MacroSheets

This McAfee technical analysis documents a surge in XLSM/macro-sheet Excel malware that embeds obfuscated formulas and macros to download and execute DLL payloads (e.g., Qakbot and other banking/infostealer families). The report explains XLSM structure and macrosheet obfuscation, presents an infection chain and a sample SHA256, maps relevant MITRE ATT&CK techniques, and provides detection and mitigation guidance for endpoints.