‘Hurricane Panda’ Cyberspies Used Windows Zero-Day For Months

A sophisticated group of hackers believed to be from China has been caught using a Windows zero-day bug in a spate of attacks against technology infrastructure companies around the world. Researchers at CrowdStrike spotted the group earlier this year exploiting one of the privilege escalation vulnerabilities (CVE-2014-4113) patched Tuesday by Microsoft. The vulnerability is one of three privilege escalation issues the attackers leveraged in their campaign. CrowdStrike first detected the attacks in spring, when the group was detected on a victim’s network.”]

Source: https://www.darkreading.com/attacks-breaches/-hurricane-panda-cyberspies-used-windows-zero-day-for-months