A 266Kb attachment was delivered to a long list of Tibetan community, activists, and human rights supporters, coming from the spoofed account of another Tibetan activists address that oddly was exposed by the breached database of the Stratfor database. The file is an exploit posing as a Word document targeting buggy code in mscomctl xocx, known as CVE-2012-0158. However, this files content that forces desired control flow is unlike the metasploit PoC that mostly all. all. mostly all of the. all exploits exhibit. This type of content is unusual for the. type of. the exploit.”]
Source: https://securelist.com/new-apt-attack-shows-technical-advance-in-exploit-development/33726/