VBA: HAVING FUN WITH MACROS, OVERWRITTEN POINTERS & R/W/X MEMORY

Summary from the TLDR InfoSec newsletter

This blog post walks through how to create a stealthy arbitrary code execution attack on macOS. The author does this by seeking execution from memory without documented functions using just RtlMoveMemory and DispCallFunc to minimize traces.