ThioJoe demonstrates how Python now works inside Excel with a live example.
The attackers used process hollowing against RegAsm.exe, patched Windows defenses such as AMSI and ETW and unpacked further ...