Tag: vbe

1 Attack Reports | 0 Vulnerabilities

Attack reports

XLoader Info-stealer Distributed Using MS Equation Editor Vulnerability (CVE-2017-11882)

An analysis reveals the distribution of XLoader info-stealer through phishing emails exploiting the MS Equation Editor vulnerability (CVE-2017-11882). The attack begins with a DOCX file containing an RTF document that creates a VBE file in a temporary folder. This VBE file, built using HorusProtect…
phishing
CVE-2017-11882
xloader
info-stealer
2025-05-01
rtf
vbe
ms equation editor
regasm.exe
horusprotector
Published: May 1, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports