Threat Actors Are Using VBA Purging During Attacks