Malicious macros used in phishing emails can load fileless malware, which goes into a machine's program memory and can wreak havoc.
