Check Point Email Security | Blog

Follina in Action

Written by Jeremy Fuchs | June 22, 2022

The Follina vulnerability has rocked the cybersecurity world, causing widespread damage.

The vulnerability, dubbed "Follina", sees a Word doc using a remote template feature to retrieve an HTML file from a remote server and by using an ms-msdt MSProtocol URI scheme can execute a PowerShell. 

Avanan/Check Point customers are protected

But it can be very instructive to see how it works. This video demonstrates what Follina looks like and how it acts.