Ancient Microsoft Word Exploit Unleashes Cyber Mayhem on Taiwanese Drone Makers

Hot Take:

Who knew that a throwback to Microsoft Word 2010 would be this season’s hottest trend in cyber espionage? Retro is back, baby, and it’s packing a malware punch!

Key Points:

• Attackers are using an old version of Microsoft Word to deliver malware in a campaign dubbed “WordDrone.”
• The attack targets Taiwanese drone makers, aiming at cyber espionage and disrupting military and satellite supply chains.
• The attack involves a DLL side-loading technique to install a persistent backdoor called ClientEndPoint.
• Researchers found similarities between this attack and a previous campaign called “TIDrone,” which also targeted Taiwanese drone makers.
• The attackers exploit vulnerabilities in an ERP software popular among Taiwanese companies to gain initial access.