DarkGate Malware Exploits Recently Patched Microsoft Flaw in Zero-Day Attack

A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus software installers.
“During this campaign, users were lured using PDFs that contained Google DoubleClick Digital Marketing (DDM) open redirects that led unsuspecting victims to compromised sites hosting the Microsoft Windows SmartScreen bypass

attack bogus campaign compromised darkgate darkgate malware digital digital marketing exploits flaw google hosting january january 2024 led malware malware campaign marketing microsoft microsoft windows open redirects pdfs redirects security security flaw software windows zero-day zero-day attack