Multiple Hacking Groups Deploy Same Chrome Exploit Kit, BlueMoon, in Coordinated Attacks

Summary

Four hacking groups, including China-aligned actors, were observed using the same exploit kit, BlueMoon, within a week, targeting NGOs, aerospace, and manufacturing. BlueMoon exploits two Chromium flaws and one Windows bug, which were 'patch-gap' zero-days, indicating a rapid deployment strategy by threat actors to leverage vulnerabilities before widespread patching.