Multiple Espionage Groups Exploit BlueMoon Kit Targeting Chrome and Windows Vulnerabilities

Multiple espionage groups exploited the BlueMoon kit, leveraging unpatched Chrome and Windows vulnerabilities to conduct cyber espionage. The exploit chain, involving AI-assisted development and rapid sharing among threat actors, highlights evolving risks in software security.

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome.

The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31 (aka Bronze Vinewood, Judgement Panda, JungleBamboo,

Read original article