גלי תקיפה כנגד גופי ממשל, אקדמיה וגורמים עסקיים בישראל

Israeli CERT-IL reports a 2017 campaign targeting government, academic, research, and commercial organizations using a Word vulnerability (CVE-2017-0199), with activity attributed to the OILRIG actor; the advisory lists associated artifacts (documents, executables, scripts), IOCs (IP addresses, domains), persistence mechanisms, and recommended defenses and remediation steps, including applying the Microsoft patch and removing compromised components.