Как (НЕ) надо писать Malware:
https://www2.fireeye.com/rs/848-DID-242/images/rpt-apt29-hammertoss.pdf
https://www2.fireeye.com/rs/848-DID-242/images/rpt-apt29-hammertoss.pdf
как НЕ надо делать: https://securingtomorrow.mcafee.com/mcafee-labs/apt28-threat-group-adopts-dde-technique-nyc-attack-theme-in-latest-campaign/#sf151634298
McAfee Blogs
Threat Group APT28 Slips Office Malware into Doc Citing NYC Terror Attack
While monitoring activities around APT28, we identified a malicious Word document that leverages the Microsoft Office DDE technique.