Chinese threat actors are exploiting a sophisticated zero-day chain in Google Chrome and Microsoft Windows to deploy the GRIMWEDGE backdoor against non-governmental organisations.
A new modular exploit kit named BlueMoon has been observed chaining zero-day vulnerabilities in Google Chrome and Microsoft Windows to facilitate cyber-espionage.