SecurityUnverified

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31 (aka Bronze Vinewood, Judgement Panda, JungleBamboo,

What happened

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31 (aka Bronze Vinewood, Judgement Panda, JungleBamboo,

Why it matters

The incident may affect operational continuity, asset safety or trust around Microsoft, Google. Watch for verified scope and remediation.

Affected entities

Microsoft · MSFTNeutralGoogle · GOOGLNeutral

View evidence

1 reports · 1 original report · 1 independent

  1. The Hacker NewsPrimary source · Supports · EN · 100%
    Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Claims

  • Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

  1. First reported

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation

Confidence · formula confidence-2.1.0
Source trust80
Independent corroboration51
Primary evidence35
Claim consistency82
Extraction confidence82
Attribution quality90
Impact · formula impact-2.1.0
Event magnitude96
Market relevance74
Entity significance94
Market breadth63
Novelty68
Urgency87
Ranking · formula rank-1.0.0
Confidence factor0.8425
Freshness factor0.9603
Breaking bonus8