Quote:Microsoft has issued a warning Friday night about an active spam campaign targeting European languages that is utilizing an exploit that could infect users simply by opening the attached document.
 
In a series of tweets from the Microsoft Security Intelligence account, Microsoft is warning that they have detected an active campaign that contains RTF attachments utilizing the Microsoft Office and Wordpad CVE-2017-11882 vulnerability.
 
When successfully exploited, this vulnerability can automatically infect users by simply opening the attached document.
 

Quote:An active malware campaign using emails in European languages distributes RTF files that carry the CVE-2017-11882 exploit, which allows attackers to automatically run malicious code without requiring user interaction.
pic.twitter.com/Ac6dYG9vvw
— Microsoft Security Intelligence (@MsftSecIntel) June 7, 2019