Microsoft MSHTML Vulnerability Used to Disseminate MerkSpy Spyware
By Nathan Zych, Chief Executive Officer · · Updated July 10, 2025 · 1 min read
Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as part of a campaign primarily targeting users in Canada, India, Poland, and the U.S.
MerkSpy is designed to clandestinely monitor user activities, capture sensitive information, and establish persistence on compromised systems, as per Fortinet FortiGuard.
About the author
Nathan Zych, Chief Executive Officer
Written and reviewed by the Outsource IT team, a Burlington, Ontario managed IT services provider supporting businesses across the GTA for over 20 years. Meet the team.
Want this handled for you?
Outsource IT keeps Ontario businesses secure, supported and running. Book a short call, or score your current setup with our free IT Health Check.
