Its code can also be downloaded to users' computers after they click on malicious links in advertising banners or URLs. Additionally, a huge share of macro virus distributions is after email spam. Threat actors who perform the spear phishing campaigns specifically mask their message to look as realistic as possible, and add an infected file. The main execution environment for macro malware is MS Office apps and similar solutions that are compatible with macros and other Office applets.