The attack begins with spear #phishing emails including a malicious InPage document.

The attack begins with spear #phishing emails including a malicious InPage document. If opened, it exploits #bufferoverflow flaw to drop vulnerable VLC player & malicious DDL file. Side-loaded DLL then connects to C&C server to download the final malware encoded in a JPEG file.

— The Hacker News (@TheHackersNews) November 9, 2018

Source: Twitter