A new malicious campaign from the well known actor Group 74 (aka Tsar Team, Sofacy, APT28, Fancy Bear). Ironically the decoy document is a deceptive flyer relating to the Cyber Conflict U.S. conference. Unlike previous campaigns from this actor, the flyer does not contain an Office exploit or a 0-day, it simply contains a malicious Visual Basic for Applications (VBA) macro. The VBA drops and executes a new variant of Seduploader. This reconnaissance malware has been used by Group 74 for years.”]
Source: https://blog.talosintelligence.com/2017/10/cyber-conflict-decoy-document.html