<![CDATA[Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week]]>

<![CDATA[Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week]]>Multiple espionage-motivated threat clusters have been observed deploying a previously undocumented exploit kit dubbed BlueMoon, which chains together several vulnerabilities in Microsoft Windows and Google Chrome.

The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31, also known as Bronze Vinewood, Judgement Panda, and JungleBamboo.

Key points from the reporting:

The campaign involved multiple espionage-motivated threat activity clusters rather than a single actor.
BlueMoon is an exploit kit that chains multiple vulnerabilities together in Windows and Chrome.
The kit was previously undocumented prior to this activity.
The earliest observed in-the-wild deployment is linked to APT31, a China-aligned state-sponsored group with several tracked aliases.

No specific CVE identifiers or patch numbers were provided in the source material, so none are listed here. Organizations should monitor vendor advisories for Chrome and Windows updates and prioritize timely patching of both browsers and endpoints, given the exploit kit's reliance on chaining multiple flaws across both platforms.

Source: The Hacker News

Has anyone seen related telemetry or additional details on the BlueMoon exploit chain in their environment?

]]>https://xploitlk.com/topic/280/four-spy-groups-used-the-same-chrome-and-windows-exploit-kit-within-a-weekRSS for NodeSat, 12 Sep 2026 05:50:09 GMTThu, 10 Sep 2026 02:30:23 GMT60