APT37 Uses Internet Explorer Zero-Day to Spread Malware - Dark Reading

North Korean menace radical APT37 was capable to exploit an Internet Explorer zero-day vulnerability to deploy documents loaded with malware arsenic portion of its ongoing run targeting users successful South Korea, including defectors, journalists, and quality rights groups.

Google's Threat Analysis Group (TAG) recovered the zero-day flaw in the Internet Explorer JScript motor successful precocious October, tracked nether CVE-2022-41128, and present reports that Microsoft was responsive and has issued applicable patches.

To lure successful imaginable victims, the malicious documents referenced the deadly assemblage crushing incidental successful Seoul that happened during Halloween celebrations connected Oct. 29.

"This incidental was widely reported on, and the lure takes vantage of wide nationalist involvement successful the accident," the TAG squad reported. "This is not not the archetypal clip APT37 has utilized Internet Explorer 0-day exploits to people users."