BlueMoon

highZero-Day

New 'BlueMoon' Exploit Kit Weaponizes Windows and Chrome Zero-Days in Espionage Campaigns

An exploit kit named 'BlueMoon' has been observed in the wild, deployed by multiple cyber-espionage groups. The kit exploits zero-day vulnerabilities in Microsoft Windows and Google Chrome, potentially leading to remote code execution and full client-side compromise. Specific CVE identifiers and detailed exploitation methods have not yet been disclosed, and the full scope of affected victims remains unconfirmed.

BleepingComputer18 days ago1 min read

highThreat Intelligence

Four Espionage Groups Deploy BlueMoon Exploit Kit Chaining Windows and Chrome Vulnerabilities

Multiple espionage-motivated threat activity clusters have been observed deploying a previously undocumented exploit kit named BlueMoon. The kit chains together multiple vulnerabilities in Microsoft Windows and Google Chrome to gain initial access for in-the-wild espionage operations. Four distinct threat groups were observed using the kit within a single week, marking a significant concentration of coordinated activity. The first attributed use has been linked to APT31, a China-aligned state-sponsored group, with additional clusters also identified. No specific victim counts or data exfiltration details have been disclosed.

The Hacker News20 days ago1 min read

BlueMoon

Quick answers

Related Articles

New 'BlueMoon' Exploit Kit Weaponizes Windows and Chrome Zero-Days in Espionage Campaigns

Four Espionage Groups Deploy BlueMoon Exploit Kit Chaining Windows and Chrome Vulnerabilities