Microsoft Issues Warning on Spam Campaign Using Office Exploits

[silversurfer]

Microsoft has issued a warning Friday night about an active spam campaign targeting European languages that is utilizing an exploit that could infect users simply by opening the attached document.
 
In a series of tweets from the Microsoft Security Intelligence account, Microsoft is warning that they have detected an active campaign that contains RTF attachments utilizing the Microsoft Office and Wordpad CVE-2017-11882 vulnerability.
 
When successfully exploited, this vulnerability can automatically infect users by simply opening the attached document.
 

An active malware campaign using emails in European languages distributes RTF files that carry the CVE-2017-11882 exploit, which allows attackers to automatically run malicious code without requiring user interaction.
pic.twitter.com/Ac6dYG9vvw
— Microsoft Security Intelligence (@MsftSecIntel) June 7, 2019

SOURCE: https://www.bleepingcomputer.com/news/se...-exploits/