Microsoft Word Vulnerability Used Against Taiwanese Government

[InfoSec News <alerts () infosecnews org>]

http://www.techweekeurope.co.uk/news/microsoft-word-vulnerability-used-target-taiwanese-government-145370

By Thomas Brewster
Tech Week Europe
May 13, 2014

A vulnerability in Microsoft Word has been used to target a range of 
Taiwanese government bodies and an educational institute, a security 
company has warned.

Whilst a patch was released by Microsoft in its April Patch Tuesday 
release, attackers continue to use the flaw in the knowledge that 
organisations would have failed to update their systems.

The first attack spotted by researchers at Trend Micro used an email with 
a malicious attachment, claiming to have been sent by a government 
employee offering information on a national poll. The second used similar 
tactics, but focused on free trade issues, with an attachment containing a 
title about a work project.

Both dropped malware onto the targets’ systems, which was capable of 
stealing files and persistent surveillance.

The attacks have been tied to a campaign known as Taidoor, which has used 
zero-day flaws in Internet Explorer to hit high-profile targets in the 
past.

[...]

--
Subscribe to InfoSec News
http://www.infosecnews.org/subscribe-to-infosec-news/