Fancy Bear Uses Nuke Threat Lure to Exploit 1-Click Bug

Government Hacks Malware Vulnerabilities
The APT is pairing a known Microsoft flaw with a malicious document to load malware that nabs credentials from Chrome, Firefox and Edge browsers.