Internet Explorer Vulnerability Actively Exploited

An unidentified threat actor is exploiting a memory corruption vulnerability (CVE-2021-26411) in Microsoft Internet Explorer to deploy a remote access trojan. For initial access, the attackers use a Word document named “Manifest.docx” that loads exploit code and executes shellcode to deploy the trojan. The malware can access system files, identify antivirus products, execute malicious payloads, read, delete and download files, and exfiltrate data.