Threat actorcritical
Lazarus Group Exploits Google Chrome Flaw in New Campaign
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-4947 | V8 Type Confusion in Google Chrome Actively Exploited by Lazarus Group | 9.6 | 15% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | detankzone.com | stigation traced the infection back to a deceptive website, detankzone[.]com , which posed as a legitimate decentralized finance (DeFi |
From the original article
2 min read at infosecurity-magazine.com
A recently discovered cyber-attack by the notorious Lazarus Group , including its BlueNoroff subgroup, has exposed a new vulnerability in Google Chrome. The group used a zero-day exploit to take complete control of infected systems, marking the latest in a long series of sophisticated campaigns from the North Korean-backed threat actor.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.