APT37 Exploits Microsoft Internet Explorer Zero Day Vulnerability
The APT37 threat group was discovered exploiting a remote code execution vulnerability in Windows Scripting Languages (CVE-2022-41128).
The initial infection vector consisted of malicious Microsoft Office documents along with a rich text file (RTF) remote template.
Successful exploitation requires the victim to disable protected view before the remote RTF template is downloaded.
Featured Resources
View More Resources
Demo
From Vulnerability to Validation
See how Cymulate connects vulnerabilities to real attack scenarios to validate what’s actually exploitable.
Demo
Threat Validation Demo
See how Cymulate helps security teams quickly validate protection against new threats and get answers in minutes
Demo
From Control Validation to Exposure Validation
See how security teams move from control validation to true exposure validation using real-world attack scenarios