Terry Myerson said Strontium was exploiting the bug to infect PCs
in order to get access to potentially sensitive data.
Strontium is also known as APT28 and Fancy Bear, and has previously been
blamed for attacking a French TV network and the US Democratic Party.
Microsoft says it is working on a fix.
It intends to release the patch next week.