Security News > 2017 > April > MS Office zero-day is used to infect users with Dridex (Help Net Security)

The still unpatched MS Office zero-day vulnerability publicized by McAfee and FireEye researchers this weekend is being exploited to deliver the infamous Dridex banking malware. Exploit delivered through spam email ProofPoint researchers observed the exploit being leveraged through a spam email campaign directed at millions of recipients across numerous organizations, primarily located in Australia. “Emails in this campaign used an attached Microsoft Word RTF (Rich Text Format) document. Messages purported to be from ‘

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/UTaNVpucxZs/