A Hacking Group Is Already Exploiting the Office Equation Editor Bug

itman · Nov 24, 2017

Note that these Win Updates are Office 2007+ updates. So made sure you have applied them.

A week after details about a severe Microsoft Office vulnerability came to light, at least one criminal group is now using it to infect users.

The group is not your regular spam botnet, but a top cyber-criminal operation known to security researchers as Cobalt, a hacking outfit that has targeted banks, ATM networks, and financial institutions for the past two years.

CVE-2017-11882 used by Cobalt hacking group

According to Reversing Labs, a UK-based cyber-security firm, the Cobalt group is now spreading RTF documents to high-value targets that are laced with exploits that take advantage of CVE-2017-11882.

This is a vulnerability in the Office Equation Editor component that allows an attacker to execute code on victims' computers without user interaction.

Patch now, before vulnerability is exploited en masse

As we've seen in the past, it doesn't take too long for a vulnerability to trickle down from professional cyber-criminal groups to spam botnet herders once public PoCs are available.

Users should apply Windows updates KB2553204, KB3162047, KB4011276, and KB4011262, included in the November 2017 Patch Tuesday, to guard against CVE-2017-11882 exploitation.
Click to expand...

https://www.bleepingcomputer.com/ne...dy-exploiting-the-office-equation-editor-bug/

Log in or Sign up

A Hacking Group Is Already Exploiting the Office Equation Editor Bug

itman Registered Member

Log in or Sign up

A Hacking Group Is Already Exploiting the Office Equation Editor Bug

itman Registered Member

Useful Searches