According to reporting, the kit was used in targeted campaigns, with the zero-days giving attackers a way into victim environments before patches were available. The activity has been attributed to more than one espionage-focused threat group, suggesting the tooling was shared or reused across operations.

Key points:

• The exploit kit is named BlueMoon.
• It leveraged zero-day flaws in Windows and Chrome.
• Multiple cyber-espionage groups were involved in deploying it.
• The campaign relied on previously unknown vulnerabilities, meaning no fix was available at the time of exploitation.

Details on specific affected versions, indicators of compromise, and mitigation guidance were not provided in the source material.

Source: BleepingComputer

Has your organization reviewed its Windows and Chrome patch cadence in light of shared exploit kits like this one?