North Korean threat actor Citrine Sleet exploiting Chromium zero-day
Sept. 2, 2024, 9:12 p.m.
Description
Microsoft identified a North Korean threat actor exploiting a zero-day vulnerability in Chromium, now identified as CVE-2024-7971, to gain remote code execution (RCE). Microsoft assess with high confidence that the observed exploitation of CVE-2024-7971 can be attributed to a North Korean threat actor targeting the cryptocurrency sector for financial gain.
Tags
Date
- Created: Sept. 2, 2024, 8:46 p.m.
- Published: Sept. 2, 2024, 8:46 p.m.
- Modified: Sept. 2, 2024, 9:12 p.m.
Attack Patterns
- Kaolin
- Citrine Sleet
- T1014
- T1176
- T1496
- T1036
- T1553
- T1195
- T1068
Additional Informations
- Gaming
- Investment
- Cryptocurrency
- Technology
- Financial
- Government