There's been a big rise in phishing attacks using Microsoft Excel XLL add-ins

The various malware families identified as being delivered in attacks leveraging XLL files include Dridex, IcedID, BazaLoader, Agent Tesla, Raccoon Stealer, Formbook, and Bitrat.