Printify
EXHIBIT 0034 — FOLLINA
EXHIBIT 0034 — FOLLINA
Couldn't load pickup availability
The tool Windows ships to diagnose problems was the thing running the attack.
Follina, catalogued as CVE-2022-30190, was a way to run code on a Windows machine from a Microsoft Office document without any macro. It worked by abusing the ms-msdt URL scheme, which hands control to the Microsoft Support Diagnostic Tool, the utility that normally gathers logs when you ask Windows for help. A document could invoke it and feed it a command, and the command ran.
No macro meant none of the usual warnings. The document did not need to be fully opened either: because the payload could be triggered through the file's template loading, an RTF version fired from the Explorer preview pane, the moment the file was selected, before anyone double-clicked anything.
The most uncomfortable detail is the timeline. A researcher reported the technique to Microsoft in April 2022. Microsoft closed the case, saying it was not a security-related issue. It became public on 27 May 2022 when a security group called nao_sec found a malicious document using it in the wild, and only then, with working attacks circulating, did it get a CVE and, on 14 June 2022, a patch.
The name comes from Kevin Beaumont, who noticed the sample referenced the number 0438, which is the telephone area code for Follina, a small town in northern Italy. The name stuck faster than the fix arrived.
For a few weeks in the spring of 2022, the safest thing to do with a Word document from a stranger was not to click it, not to open it, but to make sure your file browser was not even showing you a preview of it.
The tool that diagnoses the problem was the problem.
EXHIBIT 0034 / FOLLINA / 2022
Printing, size and care
Printing, size and care
Every exhibit is printed to order, direct to garment, by Monster Digital in Miami, Florida. The ink goes into the cotton rather than sitting on top of it, so there is no plastic feel and nothing to crack or peel. It fades the way a good print should: slowly, evenly, over years of washing.
The tee is a Gildan 64000 Softstyle. 100% ring-spun cotton on the solid colours; heathers and Sport Grey are cotton-poly blends. 4.5 oz, tape-reinforced shoulders, no side seams. Unisex, S to 3XL. The artwork is printed on the front, centred on the chest, about 8.5 inches wide by 12 inches tall.
The hoodie is a Gildan 18500 Heavy Blend. 50/50 cotton-poly, 8 oz, double-lined hood, front pouch pocket. Unisex, S to 5XL. The artwork is printed large on the back, about 9 inches wide by 12.5 inches tall, set below the hood so nothing hides under it. The UNHACKED emblem sits on the left chest at about 3.75 inches.
Care. Machine wash cold, inside out. Tumble dry low or hang. No bleach. Do not iron over the print. That is the whole list.
Shipping
Shipping
US shipping is free on every order, no minimum.
Every piece is printed when you order it, so nothing ships until the press runs. Monster Digital usually has an order printed and out the door within two business days. Allow five to eight business days from order to door in the US; most arrive sooner. You get a tracking number by email the moment it ships.
Everything ships from Miami, Florida. International orders are welcome: rates show at checkout, transit runs longer, and any customs duties are charged by your country, not by us.
Need to change or cancel? Email support@unhacked.shop right away. Orders go to print quickly, and once printing has started we cannot cancel, but the returns policy still covers you.
Returns and exchanges
Returns and exchanges
If we got it wrong, we replace it free and you do not ship anything back. Damaged, misprinted, defective, or the wrong item: email support@unhacked.shop within 30 days of delivery with your order number and a photo. Replacement at no cost, or a full refund if you would rather.
If the fit is wrong or you changed your mind, returns are accepted for 30 days from delivery on items that are unworn, unwashed, and in original condition. Email us with your order number for instructions. Return shipping on these is paid by you; the refund goes to your original payment method within 5 to 10 business days of our receiving it.
Exchanges. Fastest route is a return plus a new order. Email us and we will help you get the size right the second time.
Full policy: Refund policy.
