Adobe Reader zero-day flaw under active exploitation

Malicious PDF documents have been hiding a nasty secret: a zero-day vulnerability in Adobe Reader that's been exploited by attackers since at least December, allowing them to spread malware and wreak havoc. This stealthy threat highlights the urgent need for better detection and response to these types of attacks.

https://osintsights.com/adobe-reader-zero-day-flaw-under-active-exploitation?utm_source=mastodon&utm_medium=social

#ZeroDay #AdobeReader #EmergingThreats #VulnerabilityExploitation #MaliciousDocuments

I wrote a small Python library to extract metadata and embedded files in a #OneNote documents (.one). The OneNote file format is not really documented but it seems to work on the files I tested.

It is published on the @volexity GitHub repository: https://github.com/volexity/threat-intel/tree/main/tools/one-extract
It can be used in #standalone or included easily on any #pipeline.
#CTI #threathunting #maldoc #maliciousdocuments

PoetRAT: Malware targeting public and private sector in Azerbaijan evolves - By Warren Mercer, Paul Rascagneres and Vitor Ventura.

The Azerbaijan public sector and other import... http://feedproxy.google.com/~r/feedburner/Talos/~3/HJ1mqTAdQDQ/poetrat-update.html #maliciousdocuments #azerbajian #poetrat #python #lua