A variant of the Dridex banking malware is using macOS to spread to others, by using email attachments that look like regular documents.