Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

North Korean hackers target employees of news outlets, software vendors and more through Chrome vulnerability

The Record ()3 min read3
Read at therecord.media
Analyze CVE-2022-0609 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2022-0609
Tags
cve-2022-0609vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-0609
Use-After-Free in Google Chromium Animation Component (Chrome, Edge, Opera)
8.822%KEV
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
domaincolasprint.com, ziprecruiters[.]org. The exploitation URLs were https[:]//colasprint[.]com/about/about.asp and https[:]//varietyjob[.]com/sitemap/si
domaindisneycareers.netloit kit, according to Weidemann. The fake domains included disneycareers[.]net, find-dreamjob[.]com, indeedus[.]org, varietyjob[.]com, z
domainfind-dreamjob.como Weidemann. The fake domains included disneycareers[.]net, find-dreamjob[.]com, indeedus[.]org, varietyjob[.]com, ziprecruiters[.]org. T
domainindeedus.orgdomains included disneycareers[.]net, find-dreamjob[.]com, indeedus[.]org, varietyjob[.]com, ziprecruiters[.]org. The exploitation
domainvarietyjob.comd disneycareers[.]net, find-dreamjob[.]com, indeedus[.]org, varietyjob[.]com, ziprecruiters[.]org. The exploitation URLs were https[:]
domainziprecruiters.orgnet, find-dreamjob[.]com, indeedus[.]org, varietyjob[.]com, ziprecruiters[.]org. The exploitation URLs were https[:]//colasprint[.]com/ab

From the original article

3 min read at therecord.media

Google has released a report identifying two North Korean government hacking campaigns that exploited a Google Chrome 0-day. Google Threat Analysis Group’s Adam Weidemann explained that on February 10, the company discovered two different North Korean campaigns – which they attributed to Operation Dream Job and Operation AppleJeus – exploiting CVE-2022-0609 .

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.