other

BlueMoon

Exploit kit that chains Chrome V8 flaws with a Windows local privilege escalation bug to take a visited web page through to elevated code execution, with an operator-configurable final command.

Known aliases

BlueMoon exploit chain

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Four China-aligned crews adopted the same Chrome-to-SYSTEM exploit kit inside six days

Proofpoint says APT31 fired first on Aug. 28 and three more espionage groups were running the same three-bug BlueMoon chain by Sept. 3, which points at a shared exploit-kit supplier rather than four separate discoveries.

Publishers:cyberscoop.com

Reality

Evidence55
Adoption45
Hype gap+18
Incentives65
Confidence55

security1 publisher

BlueMoon exploit kit spread to four espionage crews within a week of APT31's first use

Proofpoint says four espionage clusters were running the same undocumented Chrome and Windows exploit chain within a week of its debut, which puts the pacing of browser patching in the hands of whoever ships the kit.

Publishers:thehackernews.com

Reality

Evidence58
Adoption62
Hype gap+12
Incentives55
Confidence57