New Formbook Campaign Delivered Through Phishing Emails
netskope.com · 11 Mar 2022 · Licence: not cleared; local research copy only
CVEs this report names
2 CVEs- CVE-2017-11882Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1566.001Spearphishing AttachmentT1059Command and Scripting Interpreter13 reports99.9%Top 0.03%88.5priority
- CVE-2018-0798Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution5 reports95.1%Top 0.14%79.1priority
Where it names them
CVE-2017-11882 Original (opens in a new tab) ↗
The infected spreadsheet delivers the threat through vulnerability described under CVE-2017-11882 and CVE-2018-0798.
CVE-2018-0798 Original (opens in a new tab) ↗
The infected spreadsheet delivers the threat through vulnerability described under CVE-2017-11882 and CVE-2018-0798.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.