Storm-0978 attacks reveal financial and espionage motives

Microsoft has identified a phishing campaign conducted by the threat actor tracked as Storm-0978 targeting defense and government entities in Europe and North America. The campaign involved the abuse of CVE-2023-36884, which included a zero-day remote code execution vulnerability exploited via Microsoft Word documents.

The post Storm-0978 attacks reveal financial and espionage motives appeared first on Microsoft Security Blog.

abuse actor america attacks campaign code code execution cve cve-2023-36884 defense documents entities espionage europe exploited financial government microsoft microsoft word north north america phishing phishing campaign remote code remote code execution storm-0978 targeting threat threat actor vulnerability vulnerability exploited word zero-day