North Korean threat actor Citrine Sleet exploiting Chromium zero-day

Sept. 2, 2024, 9:12 p.m.

Description

Microsoft identified a North Korean threat actor exploiting a zero-day vulnerability in Chromium, now identified as CVE-2024-7971, to gain remote code execution (RCE). Microsoft assess with high confidence that the observed exploitation of CVE-2024-7971 can be attributed to a North Korean threat actor targeting the cryptocurrency sector for financial gain.

Date

  • Created: Sept. 2, 2024, 8:46 p.m.
  • Published: Sept. 2, 2024, 8:46 p.m.
  • Modified: Sept. 2, 2024, 9:12 p.m.

Indicators

  • weinsteinfrog.com
  • voyagorclub.space

Attack Patterns

  • Kaolin
  • Citrine Sleet
  • T1014
  • T1176
  • T1496
  • T1036
  • T1553
  • T1195
  • T1068

Additional Informations

  • Gaming
  • Investment
  • Cryptocurrency
  • Technology
  • Financial
  • Government

Linked vulnerabilities