Identified Zero-Day Vulnerability in Chromium Exploited by North Korean Hacker Group

Microsoft cybersecurity researchers discovered a zero-day vulnerability in the Chromium engine, utilized by the Chrome browser, targeted by the North Korean hacker group Citrine Sleet. The vulnerability was fixed on Aug. 21, emphasizing the need for users to update their browsers. Microsoft attributed the attack to Citrine Sleet with 'medium confidence,' known for focusing on the cryptocurrency sector and developing the AppleJeus trojan malware, also used by the Lazarus Group. While Microsoft informed affected customers, the exact number remains undisclosed. This incident marks the third patched vulnerability in Chromium this year. Google swiftly addressed the issue post-report. The hackers employed the FudModule rootkit malware for remote code execution, employing advanced social engineering tactics. Chrome versions before 128.0.6613.84 are susceptible to these attacks. Citrine Sleet, previously known as DEV-0139, has a history of targeting cryptocurrency exchanges and startups, posing a significant threat to the digital asset industry.