Four Groups Use Shared BlueMoon Chrome Exploit Kit

Four cyber-espionage groups, including China-aligned TA412, deployed the shared BlueMoon exploit kit in late August. The kit chains two Chromium zero-days with a Windows privilege escalation flaw to compromise Chrome browsers and deploy malware against U.S. defense contractors, NGOs, and Southeast Asian targets.