{"id":47063,"date":"2022-06-09T16:07:32","date_gmt":"2022-06-09T16:07:32","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33541\/Symantec-More-Malware-Operators-Moving-In-To-Exploit-Follina.html"},"modified":"2022-06-09T16:07:32","modified_gmt":"2022-06-09T16:07:32","slug":"symantec-more-malware-operators-moving-in-to-exploit-follina","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/symantec-more-malware-operators-moving-in-to-exploit-follina\/","title":{"rendered":"Symantec: More Malware Operators Moving In To Exploit Follina"},"content":{"rendered":"

While enterprises are still waiting for Microsoft to issue a fix for the critical “Follina” vulnerability in Windows, yet more malware operators are moving in to exploit it.<\/p>\n

Microsoft late last month acknowledged the remote code execution (RCE) vulnerability \u2013 tracked as CVE-2022-30190<\/a> \u2013 but has yet to deliver a patch for it. The company has outlined workarounds<\/a> that can be used until a fix becomes available.<\/p>\n

In the meantime, reports of active exploits of the flaw<\/a> continue to surface. Analysts with Proofpoint’s Threat Insight team earlier this month tweeted<\/a> about a phishing campaign, possibly aligned with a nation-state targeting US and European Union agencies, which uses Follina. The Proofpoint researchers said the malicious spam messages were sent to fewer than 10 Proofpoint product users.<\/p>\n