{"uuid": "5cb1f0f1-8e66-417a-b3df-6e368ba788ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-11882", "type": "exploited", "source": "https://t.me/information_security_channel/24180", "content": "Formbook campaign with what looks like a few changes. Recently the criminals distributing this malware have been using .exe files inside various forms of an archive, including .iso, .ace, .rar. , zip. Frequently they use various Microsoft Office Equation Editor exploits to contact a remote site & download the payload. Very occasionally I have seen [\u2026]\nThe post FORMBOOK Malware Delivered via Weaponized RTF Word Docs \u2013 Using CVE-2017-11882 (https://gbhackers.com/formbook-malware-weaponized-rtf/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2019-01-30T08:43:10.000000Z"}