Hackers Exploiting Old Microsoft Office RCE Flaw
Hackers are exploiting a remote code execution vulnerability in Microsoft Office, known as CVE-2017-11882, using a malware called Agent Tesla. This malware targets users via spam emails with malicious attachments. Once opened, the attachment initiates a series of actions, leading to installation of system hooks and data extraction. Hackers control the threat via a Telegram bot receiving stolen data. Users are urged to keep abreast of cyber threats and maintain updated software to prevent attacks.