Diamond

<ul>
 <li>Microsoft identified a North Korean hacking group exploiting a zero-day Chromium vulnerability to target cryptocurrency users.</li>  
 <li>The threat actor, known as Citrine Sleet, uses sophisticated malware to gain control of victims' digital assets.</li>  
 <li>&nbsp;Microsoft has urged users to update their software immediately, highlighting the urgency of the situation.</li> 
</ul>  
<p>Microsoft, the world tech leader, has recently threatened a North Korean hacker group that is exploiting a zero-day vulnerability in Google’s Chromium browser. This vulnerability, known as CVE-2024-7971, has been used by the hackers to hack into the details of normal users, where they can steal digital currency. Microsoft refers to the attributed threat actor as Citrine Sleet, who has been gathering intelligence on the crypto sector, emphasizing the organizations and individuals that operate with crypto assets.</p>  
<h2 class="wp-block-heading" id="h-the-approach-used-by-citrine-sleet-attack"><strong>The Approach Used by Citrine Sleet Attack</strong></h2>  
<p>In its latest <a href="https://www.microsoft.com/en-us/security/blog/2024/08/30/north-korean-threat-actor-citrine-sleet-exploiting-chromium-zero-day/" target="_blank" rel="noopener noreferrer nofollow">blog post</a>, Microsoft said that users should be on the lookout because Citrine Sleet uses social engineering and other techniques to persuade users to install harmful applications. The Asset Management Group constructs dummy virtual domains imitating real cryptocurrency exchanges and then hijacks users by offering them applications posing as a cryptocurrency exchange or offering fake job opportunities. Once installed, the malware, AppleJeus, collects the information needed to gain control of the target’s digital assets.</p>  
<h2 class="wp-block-heading" id="h-the-exploited-chromium-vulnerability"><strong>The Exploited Chromium Vulnerability</strong></h2>  
<p>On August 19, 2024, <a href="https://cryptonewsland.com/microsoft-labels-openai-a-frenemy-in-recent-sec-filing-amid-antitrust-investigations/" target="_blank" rel="noopener noreferrer nofollow">Microsoft </a>identified the exploitation of the CVE-2024-7971 vulnerability by Citrine Sleet. This type of confusion vulnerability in the V8 JavaScript engine of Chromium allowed the hackers to execute code within the sandboxed renderer process, leading to system compromise. Microsoft has also linked this activity to another North Korean threat actor, Diamond Sleet, which shares tools and infrastructure with Citrine Sleet.</p>  
<p>Following the discovery, <a href="https://cryptonewsland.com/chiliz-blockchain-teams-up-with-south-koreas-google-for-crypto-wallet-collaboration" target="_blank" rel="noopener noreferrer nofollow">Google</a> released a patch for the vulnerability on August 21, 2024. Microsoft has urged all users to implement the fix immediately to prevent further exploitation. The company has also directly notified targeted or compromised customers, providing them with crucial information to secure their systems.</p>  
<h2 class="wp-block-heading" id="h-microsoft-s-response-and-recommendations">Microsoft's Response and Recommendations</h2>  
<p>Following the discovery, Google released a patch for the vulnerability on August 21, 2024. Microsoft has urged all users to implement the fix immediately to prevent further exploitation. The company has also directly notified targeted or compromised customers, providing them with crucial information to secure their systems.</p> 
<p>The post <a href="https://cryptonewsland.com/microsoft-warns-of-north-korean-hackers-targeting-crypto-users/" rel="noopener noreferrer nofollow">Microsoft Warns of North Korean Hackers Targeting Crypto Users</a> appeared first on <a href="https://cryptonewsland.com" rel="noopener noreferrer nofollow">Crypto News Land</a>.</p>

Microsoft Warns of North Korean Hackers Targeting Crypto Users

Table of Contents

Crypto News Land

Other articles published on Aug 31, 2024

Will Bitcoin (BTC) Price Rebound in September?

MoonBag’s $4M Presale Ditches Market Blues as STARRS Surpasses $770k with Pawfury’s NFT-Focused

New Solana Memecoin Vote Trump to Rally 17,000% Before Exchange Listing, While SHIB and DOGE Fall

Coinbase successfully carries out first AI-run crypto trade

TON and SOL Stabilize as Investors Heavily Chooses DigiHorse (DIGI)

Polyhedra and Flare Team Up to Boost Cross-Chain Security

Join our free newsletter for daily crypto updates!