that exploited the vulnerability. Once successfully exploited, the file installed Backdoor.Emdivi. As CVE2012-5054 was publicly disclosed in the same month, the attack utilized what was, at the time, a zero-day