APT Exploits Microsoft Zero-Day in Malware Attacks

An APT group has been exploiting a Microsoft zero-day vulnerability in attacks in order to bypass Microsoft Defender SmartScreen and infect financial market trader companies with the DarkMe malware.

Researchers with Trend Micro’s Zero Day Initiative said that the known APT group, called Water Hydra, was leveraging the flaw (CVE-2024-21412) in order to bypass Defender SmartScreen, Microsoft’s feature in Windows 10 and 11 that is aimed at preventing phishing and malware attacks. The attack was first found by the researchers …

apt apt group attacks bypass called companies cve cve-2024-21412 defender defender smartscreen exploiting exploits financial flaw hydra infect initiative malware malware attacks market micro microsoft microsoft defender microsoft zero-day order researchers smartscreen trend trend micro vulnerability water zero-day zero day initiative zero-day vulnerability