From the article:

> Attackers have already had to adapt to tricking users into affirmatively running macros, but the new moratorium means targets would have to carry out a much more involved process to be infected—making it much less likely that attackers will be able to successfully guide them through it.

I didn't see a description of the new process, but it sounds like they beefed it up some.