Windows SmartScreen flaw exploited to drop Phemedrone malware

A Phemedrone information-stealing malware campaign exploits a Microsoft Defender SmartScreen vulnerability (CVE-2023-36025) to bypass Windows security prompts when opening URL files. [...]

bypass campaign cve cve-2023-36025 defender defender smartscreen exploited exploits files flaw information malware malware campaign microsoft microsoft defender prompts security smartscreen stealing url vulnerability windows windows security windows smartscreen