Researchers found the threat actor attempting to use the now-patched flaw to load and execute a malicious dynamic link library on infected systems.
First seen on darkreading.com
Jump to article: www.darkreading.com/vulnerabilities-threats/toddycat-apt-eset-bug-silent-malware