Hackers Use Fake Purchase Order Emails to Deliver XLoader Malware Through Malicious Word Documents

Hackers are sending fake purchase order emails to trick recipients into opening Word documents that deliver XLoader, an information-stealing malware. The attack uses an embedded document, an old Microsoft Equation Editor vulnerability, and several script stages to reach its final payload. What begins as a routine order confirmation can end with stolen browser data and […]

Read the original article:

Hackers Use Fake Purchase Order Emails to Deliver XLoader Malware Through Malicious Word Documents