как НЕ надо делать: https://securingtomorrow.mcafee.com/mcafee-labs/apt28-threat-group-adopts-dde-technique-nyc-attack-theme-in-latest-campaign/#sf151634298
McAfee Blogs
Threat Group APT28 Slips Office Malware into Doc Citing NYC Terror Attack
While monitoring activities around APT28, we identified a malicious Word document that leverages the Microsoft Office DDE technique.
0day macOS-only vulnerability in IOHIDFamily https://siguza.github.io/IOHIDeous/