Iranian Hackers Abusing Known Bug in Microsoft's MSHTML

A new Iranian actor was spotted abusing an RCE flaw in Microsoft MSHTML to target Farsi-speaking people globally and stealing their Google and Instagram credentials. The attacks started in July via spear-phishing emails that targeted Windows users with Winword attachments. Exports recommend organizations implement a robust patch program and deploy reliable anti-malware solutions.