Microsoft MSHTML Vulnerability Used to Disseminate MerkSpy Spyware

Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as part of a campaign primarily targeting users in Canada, India, Poland, and the U.S.

MerkSpy is designed to clandestinely monitor user activities, capture sensitive information, and establish persistence on compromised systems, as per Fortinet FortiGuard.

Click here to contact Outsource IT