{"uuid": "2fe09aa6-b698-4671-9c93-16b63e2def5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36884", "type": "exploited", "source": "https://t.me/Rootsec_2/384", "content": "\ud83d\udca5Storm-0978 attacks reveal financial and espionage motives\nMicrosoft has identified a phishing campaign conducted by the threat actor tracked as Storm-0978(DEV-0978, RomCom...) targeting defense and government entities in Europe and North America. The campaign involved the abuse of CVE-2023-36884, which included a remote code execution vulnerability exploited via Microsoft Word documents, using lures related to the Ukrainian World Congress.", "creation_timestamp": "2024-08-16T08:08:28.000000Z"}