A new Emotet Trojan variant has been observed in the wild with the added ability to hide from anti-malware software by embedding malicious macros used to drop the main payload inside XML files disguised as Word documents.
Source: Emotet Uses Camouflaged Malicious Macros to Avoid Antivirus Detection