"Microsoft's Response to Zero-Day Exploits and Security Vulnerabilities"
TL;DR Summary
Microsoft has patched a zero-day vulnerability in Windows Defender SmartScreen that was exploited by the financially motivated threat group Water Hydra to deploy the DarkMe remote access trojan (RAT) targeting foreign exchange traders. The zero-day (CVE-2024-21412) was used in spearphishing attacks on forex trading forums and stock trading Telegram channels, with the attackers impersonating a forex broker platform to trick traders into installing the malware. This is not the first time Water Hydra has exploited zero-day vulnerabilities, having previously targeted trading accounts using a vulnerability in WinRAR.
Topics:technology#cybersecurity#darkme#financially-motivated-threat-group#microsoft#water-hydra#zero-day
- Hackers used new Windows Defender zero-day to drop DarkMe malware BleepingComputer
- Microsoft Confirms Windows Exploits Bypassing Security Features SecurityWeek
- Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws BleepingComputer
- Microsoft patches two zero-days exploited by attackers (CVE-2024-21412, CVE-2024-21351) Help Net Security
- Microsoft patches 80 vulnerabilities - Security iTnews
Reading Insights
Total Reads
0
Unique Readers
10
Time Saved
2 min
vs 3 min read
Condensed
81%
464 → 87 words
Want the full story? Read the original article
Read on BleepingComputer