A cybercriminal named Oliver targets a financial institution. Oliver sends seemingly harmless emails to employees, claiming to be from the IT department and urging them to open an attached excel spreadsheet for an urgent system update. Unknown to the employees, the attached file contains a hidden malware written in VBA that exploits a vulnerability in the excel spreadsheet software. What type of virus is Oliver employing?