An old vulnerability in Microsoft Word has triggered a series of infections with password-stealing malware in Vietnam. The attack starts with specially crafted Microsoft Word documents that trigger a vulnerability in the word processor. The malware steals credentials from the local storage of Internet Explorer and Mozilla Firefox. To steal data from Google Chrome, the malware also deploys a keylogger. Attack is yet another reminder about the necessity of deploying security hotfixes as soon as they are made available by the vendor, especially when it is a common known bug mitigated one year ago.”]

