Vulnerabilitymedium
Hackers Exploiting MS Excel Vulnerability to Spread Agent Tesla Malware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11882 | Memory Corruption RCE in Microsoft Office via Legacy Equation Editor | 7.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2020-14883 | High-Privilege Console Flaw in Oracle WebLogic Server Enables Full Takeover | 7.2 | 98% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Dec 21, 2023 Vulnerability / Phishing Attack Attackers are weaponizing an old Microsoft Office vulnerability as part of phishing campaigns to distribute a strain of malware called Agent Tesla . The infection chains leverage decoy Excel documents attached in invoice-themed messages to trick potential targets into opening them and activate the exploitation of CVE-2017-11882 (CVSS score: 7.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.