{"product_id":"follina-shirt-2022-ms-msdt-cve-2022-30190-graphic-tee-unhacked","title":"EXHIBIT 0034 — FOLLINA","description":"\u003cp\u003eThe tool Windows ships to diagnose problems was the thing running the attack.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eFollina, catalogued as CVE-2022-30190, was a way to run code on a Windows machine from a Microsoft Office document without any macro. It worked by abusing the ms-msdt URL scheme, which hands control to the Microsoft Support Diagnostic Tool, the utility that normally gathers logs when you ask Windows for help. A document could invoke it and feed it a command, and the command ran.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eNo macro meant none of the usual warnings. The document did not need to be fully opened either: because the payload could be triggered through the file's template loading, an RTF version fired from the Explorer preview pane, the moment the file was selected, before anyone double-clicked anything.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe most uncomfortable detail is the timeline. A researcher reported the technique to Microsoft in April 2022. Microsoft closed the case, saying it was not a security-related issue. It became public on 27 May 2022 when a security group called nao_sec found a malicious document using it in the wild, and only then, with working attacks circulating, did it get a CVE and, on 14 June 2022, a patch.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe name comes from Kevin Beaumont, who noticed the sample referenced the number 0438, which is the telephone area code for Follina, a small town in northern Italy. The name stuck faster than the fix arrived.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eFor a few weeks in the spring of 2022, the safest thing to do with a Word document from a stranger was not to click it, not to open it, but to make sure your file browser was not even showing you a preview of it.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe tool that diagnoses the problem was the problem.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0034 \/ FOLLINA \/ 2022\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Light Blue \/ S","offer_id":54516858552604,"sku":"38487293527083742121","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ S","offer_id":54516858585372,"sku":"25348075984544037979","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ S","offer_id":54516858618140,"sku":"21871005419649821003","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ S","offer_id":54516858650908,"sku":"14037497876949031642","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ S","offer_id":54516858683676,"sku":"20063818144684077571","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ S","offer_id":54516858716444,"sku":"10857925223397635369","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ M","offer_id":54516858749212,"sku":"26629006405278088165","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ M","offer_id":54516858781980,"sku":"19857568599245340544","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ M","offer_id":54516858814748,"sku":"22271194793194136295","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ M","offer_id":54516858847516,"sku":"11199024884141815262","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ M","offer_id":54516858880284,"sku":"15951754828642024681","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ M","offer_id":54516858913052,"sku":"19902964800495514021","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ L","offer_id":54516858945820,"sku":"23522717260603192622","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ L","offer_id":54516858978588,"sku":"23640209721602057648","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ L","offer_id":54516859011356,"sku":"26904044174786037323","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ L","offer_id":54516859044124,"sku":"13567038419666295903","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ L","offer_id":54516859076892,"sku":"16047521912880139941","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ L","offer_id":54516859109660,"sku":"25139265245354926943","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ XL","offer_id":54516859142428,"sku":"25339824156142458659","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ XL","offer_id":54516859175196,"sku":"17278735181334024101","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ XL","offer_id":54516859207964,"sku":"18626603237232673425","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ XL","offer_id":54516859240732,"sku":"15431905899781600134","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ XL","offer_id":54516859273500,"sku":"15682452925023943633","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ XL","offer_id":54516859306268,"sku":"33919744949622407284","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ 2XL","offer_id":54516859339036,"sku":"18461229056998446952","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ 2XL","offer_id":54516859371804,"sku":"31514155683499902626","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ 2XL","offer_id":54516859404572,"sku":"18932983033850005579","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ 2XL","offer_id":54516859437340,"sku":"18130704508848966565","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ 2XL","offer_id":54516859470108,"sku":"27263474278056547260","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ 2XL","offer_id":54516859502876,"sku":"22752362512923406238","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ 3XL","offer_id":54516859535644,"sku":"48933231056671417387","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ 3XL","offer_id":54516859568412,"sku":"39720751587861954009","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ 3XL","offer_id":54516859601180,"sku":"13920619292530927787","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ 3XL","offer_id":54516859633948,"sku":"20538436991557174589","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ 3XL","offer_id":54516859666716,"sku":"29507055856349192241","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ 3XL","offer_id":54516859699484,"sku":"20059496532236266459","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/13625093539717677_2048.jpg?v=1788446828","url":"https:\/\/unhacked.shop\/products\/follina-shirt-2022-ms-msdt-cve-2022-30190-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}