Emails with Backdoor Targets Russian Businesses

trendmicro.com · 7 Aug 2017 · Licence: not assessed; coordinator-only cache; do not redistribute

CVEs this report names

1 CVE

CVE-2017-0199Microsoft Office and WordPad Remote Code Execution Vulnerability
Microsoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious File T1203Exploitation for Client Execution12 reports
99.5%Top 0.06%
88.4priority

These exploit a vulnerability (CVE-2017-0199) in Microsoft Office’s Windows Object Linking and Embedding (OLE) interface.

None

No passage in this report has been tied to an ATT&CK technique.