Word-based Malware Attack Doesn't Use Macros

The attack uses malicious Word attachments that activate a four-stage infection process that ultimately exploits the Office Equation Editor vulnerability (CVE-2017-11882), patched last year by Microsoft. The payload is designed to steal credentials from the victim's email, FTP and browsers. Researchers ...

from Google Alert - vulnerability http://ift.tt/2sEcZiH
via IFTTT