North Korea state-backed hackers infected hundreds of organizational computers through a Chrome zero-day exploit, Google says. The vulnerability, which Google tracked as CVE-2022-0609, is a remote code execution flaw that allows an attacker to gain full control over a user’s device. Both groups made use of an exploit kit to place links onto compromised websites as well as websites created by the group to lure victims. The campaigns have been observed as “Operation Dream Job” and “Operation AppleJeus” by security researchers and have been active since 2018.”]
Source: https://www.govinfosecurity.com/google-observes-north-korean-attackers-exploiting-chrome-a-18797