Zero-Days Chained in Operation WizardOpium Attacks

[erek]

To reiterate: Security is important.

"Zero-day vulnerabilities in Google Chrome and Microsoft Windows were used to download and install malware onto Windows computers that visited a Korean-language news portal.

A zero-day vulnerability is one that is known, but not patched by the developers in charge of patching the vulnerability. These zero-day vulnerabilities are particularly dangerous as they can be used by state-sponsored attackers to perform malicious activity on vulnerable devices.

Last month, Kaspersky revealed that they discovered a zero-day Google Chrome vulnerability that was actively being used in online attacks called Operation WizardOpium."

https://www.bleepingcomputer.com/ne...ays-chained-in-operation-wizardopium-attacks/