'Ancient' MSFT Word Bug Anchors Taiwanese Drone-Maker Attacks

Acronis researchers disclosed 'WordDrone', a targeted campaign that leverages an outdated Microsoft Word (v14.0.4762.1000) side-loading flaw to load a malicious wwlib.dll loader and an encrypted payload delivering the ClientEndPoint backdoor; the activity, observed across multiple environments between April and July and potentially tied to Digiwin ERP components, enables session monitoring, C2 communications, data exfiltration and local-network proxying, and was shared with Taiwanese authorities along with IoCs.