Attackers Increasingly Adopting VBA-based Attack Techniques In this technique, malicious Office documents containing VBA code are saved within streams of CFBF files, with VBA macros saving data in a hierarchy including various types of streams. Source: cyware.com