Fancy Bear Uses Nuke Threat Lure to Exploit 1-Click Bug

The APT is pairing a identified Microsoft flaw with a malicious doc to load malware that nabs credentials from Chrome, Firefox and Edge browsers.