Lokibot campaign 17 September 2018

We are starting this Monday Morning with a Lokibot campaign being delivered via malicious word  docs, actually RTF files using CVE-2017-11882 Microsoft equation editor exploits.  I am seeing various email subjects. I have received 2 of each version so far today, addressed to different email addresses on my server. I would have thought by now EVERYBODY should have updated their versions of Word, Excel & Powerpoint to a fixed version. Microsoft have issued patches for these for more than 1 year now, so if there still are unprotected users, something is drastically wrong with their security set up. So far I Continue reading →