Cisco uncovers Microsoft Word spearphishing attack

Cisco has discovered spearphishing malware in Microsoft Word that uses an exploit targeting the software’s Visual Basic Scripting for Applications feature.

Cisco’s investigation into the malware identified a group of attacks by the same threat actor, with Cisco exposing the threat actor’s network after it had discovered a Microsoft Word document that downloaded and executed a secondary sample, which began beaconing to a command and control server.