Experts from Kaspersky Lab reported that that that the recently patched Windows kernel zero-day vulnerability (CVE-2018-8611) has been exploited by several threat actors. The vulnerability was reported to Microsoft by researchers at Kaspershy Lab. The flaw was exploited by known threat actors and a recently discovered group tracked as SandCat that appears to be active in the Middle East. The group was also using the FinFisher/FinSpy spyware and the CHAINSHOT malware.”]
Source: https://securityaffairs.co/wordpress/78853/hacking/cve-2018-8611-zero-day-exploit.html