A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of Windows is being actively used by at least four hacking groups, some of which have ties to the Chinese government.
Researchers from security firm Proofpoint said Wednesday that BlueMoon, the name they gave to the kit, chains three vulnerabilities together so the attackers using it can install malware of their choice. BlueMoon exploits two Chromium vulnerabilities and one in the kernel of Windows 10 (Oct 2018 Update), Windows Server 2019, Windows 10 2004, Windows Server 2022, and the initial release of Windows 11. All three vulnerabilities have received patches in the past 24 hours.
Deployed rapidly, widely shared
The attacks lacked the stealth found in many campaigns. More often, hackers want to exploit newly discovered vulnerabilities sparingly to lengthen their longevity. Proofpoint hypothesized that one reason for the widely used and visible exploit chain was to take advantage of a “patch gap” in the Chromium supply chain, which spans the time a patch is available from developers and the time that patch is incorporated into browsers such as Chrome and Edge. Another likely contributor was the use of AI, which can often spot vulnerabilities faster than discovery performed solely by humans.
விலையை சொன்னா நம்புவீங்களா? அறிமுகமானது புது ஆப்பிள் ஐபோன் டியோ.. IP68 ரேட்டிங்.. 48எம்பி கேமரா..
September 9, 2026
தலை சுற்றும் விலை.. ரூ.4,49,900-க்கு iPhone Duo அறிமுகம்.. எந்தெந்த மாடல்கள்? என்னென்ன விலை?
September 9, 2026
Europe may finally have found a space entrepreneur who is meeting the moment
September 9, 2026
ஐபோன் 18 ப்ரோ மேக்ஸ் அறிமுகம்.. ஒஎல்இடி டிஸ்பிளே.. 48எம்பி கேமரா.. iOS 27.. என்ன விலை?
September 9, 2026
Six Chinese AI firms accused of aggressively copying US frontier models
September 9, 2026
Apple ஒரே போடு.. OLED டிஸ்பிளே.. சிங்கிள் சார்ஜில் 50 மணி நேர பேக்கப்.. 64GB மெமரி.. எந்த மாடல்?
September 9, 2026
வங்கக்கடலில் புயல் சின்னம்.. சுழற்றி அடிக்கப்போகும் கனமழை! ரெட் அலர்ட் கொடுத்த இந்திய வானிலை மையம்!
September 10, 2026
Russia outpacing Ukraine's air defences with daily use of new jet-powered drones
September 10, 2026
சென்னை, திருவள்ளூருக்கு மஞ்சள் அலர்ட்.. அடுத்த 2 மணி நேரம் உஷார்! வார்னிங் கொடுத்த வானிலை மையம்
September 10, 2026
Iran war won't end until after crucial November elections, says Trump
September 10, 2026
Five dead and 86 missing as 'heartbreaking' fire breaks out on Philippines ferry
September 10, 2026
Trump pledges $5,000 to every American – and other takeaways from Republican midterms convention
September 10, 2026