Beware of Phishing Emails That Disguise Themselves as Project Material Purchase Requests

Reported 29 Sep 2026 by otx · Severity: medium

ASEC identified a phishing campaign targeting organizations in Korea through emails impersonating company employees. The emails contain malicious XLS files disguised as project material purchase request forms. When opened, the documents exploit CVE-2017-0199, an OLE2Link vulnerab