Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

A newly discovered exploit kit called BlueMoon has been used by multiple threat groups with espionage motivations. BlueMoon exploits vulnerabilities in Microsoft Windows and Google Chrome, and its first known use has been linked to the China-aligned state-sponsored group APT31. This group is also known by other names, including Bronze Vinewood, Judgement Panda, and JungleBamboo. Within a week, three other spy groups also used the same BlueMoon exploit kit. The kit chains together multiple vulnerabilities to carry out its exploits. The use of BlueMoon by these groups suggests a potentially significant threat to systems using the targeted software.