Microsoft Office 0-Day leveraged in spam campaigns

A spam campaign abused Microsoft Office vulnerability CVE-2017-0199 by delivering malicious RTF documents that load external content and run embedded VBScript/PowerShell to download and execute further payloads (notably Dridex and LATENTBOT); Zscaler ThreatLabZ observed and blocked exploitation attempts, provides IoCs (URLs, filenames), and recommends ensuring Office is fully patched and verifying email attachments.