Bypassing Gmail's malicious attachment filter with “one weird trick” (warroom.securestate.com)

Saved you a click: Gmail is grepping for the string "powershell" in a malicious macro. Splitting up the string evades detection.