Microsoft Equation Editor is a tool tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed February 11, 2026; most recent activity May 29, 2026.
A new phishing campaign distributing a variant of the Remcos RAT has been identified, targeting Microsoft Windows users. The attack utilizes a fake shipping document to deliver a malicious Word file that exploits…
A multi-stage phishing campaign has been detected distributing the XWorm remote access trojan (RAT) via malicious Excel attachments. The attack leverages CVE-2018-0802 in Microsoft Equation Editor to execute a fileless…