Operation WordDrone: Hackers Exploit Microsoft Word 2010 Flaw to Target Taiwan’s Drone Industry Cybersecurity firm Acronis has uncovered a sophisticated cyber campaign, Operation WordDrone, targeting Taiwan’s expanding drone manufacturing sector. Attackers exploited a long-standing vulnerability in Microsoft Word 2010, using a DLL side-loading technique to deploy malware through seemingly legitimate Word installations. Once inside a system, the malware installed a backdoor, enabling threat actors to steal credentials, move laterally across networks, and execute remote commands. The attack evaded traditional antivirus detection, complicating mitigation efforts. The campaign’s focus on Taiwan’s drone industry is particularly concerning. Since the government ramped up investments in military-grade UAVs in 2022, the sector has become a prime target for cyber espionage. The command-and-control (C2) infrastructure was traced to Taiwanese servers, suggesting a deliberate strike against the nation’s defense and technological capabilities. This incident highlights how outdated software vulnerabilities can be repurposed in modern, high-stakes cyberattacks, posing a growing risk to critical industries amid rising geopolitical tensions.