![Pinterest](https://pinterest.com/pin/create/button/?url=https://uknews.evprotec.com/urgent-warning-to-never-click-killer-microsoft-download-that-steals-your-logins/&media=https://uknews.evprotec.com/wp-content/uploads/2023/07/LD_KILLER-MICROSOFT-DOWNLOAD_OFF-PLATFORM.jpg&description=don't click Jona Jaupi , Technology and Science Reporter Published : 19:02, 14 Jul 2023 MICROSOFT has warned about a zero-day vulnerability that is targeting users via Word documents. Zero days are vulnerabilities that have not yet been patched or fixed by software developers. 1 Microsoft has warned about a zero-day vulnerability that is targeting users Credit: Getty This means they can be fully exploited in the wild by hackers and cybercriminals. Microsoft revealed that this particular zero-day flaw is being tracked as CVE-2023-36884. The campaign is currently targeting organizations and users with an interest in Ukraine. Microsoft explained further on its blog: "Microsoft has identified a phishing campaign conducted by the threat actor tracked as Storm-0978 targeting defense and government entities in Europe and North America. "The campaign involved the abuse of CVE-2023-36884, which included a remote code execution vulnerability exploited before disclosure to Microsoft via Word documents, using lures related to the Ukrainian World Congress." Storm-0978, also referred to as RomCom, is a cybercriminal group based out of Russia. The group is known for carrying out ransomware and extortion operations. This particular campaign is being disseminated via emails with attached malicious Word documents. In the emails, users might see Word documents disguised as news articles about Ukraine or other documents of interest to organizations. Microsoft recommends a number of tips to help users reduce the impact of this cyberattack. First starters, organizations are advised to turn on cloud-delivered protection in Microsoft Defender Antivirus. "Use Microsoft Defender for Office 365 for enhanced phishing protection and coverage against new threats and polymorphic variants," the tech giant added. Similarly, Defender for Office 365 users should ensure that Safe Attachments and Safe Links protection is enabled. Microsoft 365 Defender users can also turn on attack surface red){kind=link}
MICROSOFT has warned about a zero-day vulnerability that is targeting users via Word documents.
Zero days are vulnerabilities that have not yet been patched or fixed by software developers.
This means they can be fully exploited in the wild by hackers and cybercriminals.
Microsoft revealed that this particular zero-day flaw is being tracked as CVE-2023-36884.
The campaign is currently targeting organizations and users with an interest in Ukraine.