CVE-2017-0199

References:

  • CVE-2017-0199 on Mitre
  • CVE-2017-0199 on Cirl.lu
  • References:
  • Dridex Campaigns Hitting Millions of Recipients Using Unpatched Microsoft Zero-Day - 2017-04-10 - Proofpoint - Proofpoint Staff CVE-2017-0199 Dridex TA505
  • More Reading:

  • Microsoft Word Intruder Integrates CVE-2017-0199, Utilized by Cobalt Group to Target Financial Institutions - 2017-06-01 - Proofpoint - Matthew Mesa - Axel F - Pierre T - Travis Green MWI CVE-2017-0199 Cobalt Group
  • Unraveling ThreadKit: New document exploit builder used to distribute The Trick, Formbook, Loki Bot and other malware - 2018-03-15 - Proofpoint - Axel F - Matthew Mesa ThreadKit CVE-2017-0199
  • Fake Jobs: Campaigns Delivering More_eggs Backdoor via Fake Job Offers - 2019-02-21 - Proofpoint - Proofpoint Staff VenomKit Taurus Builder CVE-2017-0199 CVE-2018-8174