Security researchers at FireEye discovered that the Microsoft Word CVE-2017-0199 exploit was linked to cyberspying in Ukraine conflict. The zero-day vulnerability in Microsoft Office that was recently fixed by Microsoft was used to deliver a surveillance malware to Russian-speaking targets. Security experts from firm FireEye spotted the targeted attacks leveraging specifically crafted Microsoft Word documents that pretend to be a Russian military training manual. The decoy document appears to have been published in the Donetsk People’s Republic, a breakaway region in Ukraine thats received Russian support.”]
Source: https://securityaffairs.co/wordpress/57985/hacking/cve-2017-0199-finspy-spyware.html