other

UNK_LateNight

China-aligned threat activity group carrying a provisional Proofpoint designation, not yet linked to a named actor.

Current clusters

Four China-aligned crews adopted the same Chrome-to-SYSTEM exploit kit inside six days

Proofpoint says APT31 fired first on Aug. 28 and three more espionage groups were running the same three-bug BlueMoon chain by Sept. 3, which points at a shared exploit-kit supplier rather than four separate discoveries.

Publishers:cyberscoop.com

Reality

Evidence55
Adoption45
Hype gap+18
Incentives65
Confidence55

security1 publisher

BlueMoon exploit kit spread to four espionage crews within a week of APT31's first use

Proofpoint says four espionage clusters were running the same undocumented Chrome and Windows exploit chain within a week of its debut, which puts the pacing of browser patching in the hands of whoever ships the kit.

Publishers:thehackernews.com

Reality

Evidence58
Adoption62
Hype gap+12
Incentives55
Confidence57