Exploit / PoCcritical
Suspected North Korean hackers targeted crypto industry with Chromium zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-7971 | Type Confusion in Google Chromium V8 Enables Heap Corruption via Malicious Pages | 9.6 | 21% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | voyagorclub.space | hey said. The hackers used a fake domain they controlled at voyagorclub[.]space — a potential reference to a now defunct crypto platform |
From the original article
2 min read at therecord.media
Hackers allegedly connected to the North Korean government targeted the cryptocurrency industry using a zero-day affecting the Chromium browser. Microsoft revealed the campaign in a blog post on Friday, pointing the blame at a threat actor they call “Citrine Sleet.” The group has previously been attributed to a unit of North Korea’s Reconnaissance General Bureau.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.