Crimea "manifesto" deploys VBA Rat using double attack vectors

Researchers identified a maldoc named “????????.docx” (“Manifest.docx”) that downloads and executes two templates, one is macro-enabled and the other is an HTML object containing an IE exploit.