It has added the technique of using malicious XML files as its delivery method.
Source: Threadpost