RomCom exploiting Word vulnerability in campaign targeting government entities (Campaign)
ID: 99d45237-4380-5a7e-b7d2-73a2b31d4d1b
STIX ID: report--99d45237-4380-5a7e-b7d2-73a2b31d4d1b
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2023-07-03
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
Storm-0978 conducted a June 2023 campaign exploiting the zero-day CVE-2023-36884 in Microsoft Word via phishing lures to target defense and government organizations in Europe and North America; the attack delivered a RomCom-like backdoor for intelligence-gathering and credential theft, with initial exploitation detected by Microsoft Defender for Office 365 and mitigation guidance provided.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.