On February 2024 Patch Tuesday, Microsoft has delivered fixes for 72 CVE-numbered vulnerabilities, including two zero-days (CVE-2024-21412, CVE-2024-21351) that are being leveraged by attackers in the wild.
About CVE-2024-21412 and CVE-2024-21351
CVE-2024-21412 allows attackers to bypass the Microsoft Defender SmartScreen security feature with booby-trapped Internet Shortcut files.
In late December 2023, Trend Micro researcher Peter Girnus and his colleagues in the ZDI Threat Hunting team discovered the Water Hydra APT leveraging the flaw to infect victims with the DarkMe malware.
(Several other researchers, including two from Google’s Threat Analysis Group, reported the same vulnerability to Microsoft.)
“Water Hydra deployed a spearphishing campaign on forex trading…
Source link