GemStone

BlueMoon exploit kit spread to four espionage crews within a week of APT31's first use

Proofpoint says four espionage clusters were running the same undocumented Chrome and Windows exploit chain within a week of its debut, which puts the pacing of browser patching in the hands of whoever ships the kit.