PowerPool Malware Uses Windows Zero-Day Posted on Twitter

A Microsoft Windows zero-day bug was shared on Twitter last week. The vulnerability affects the Advanced Local Procedure Call (ALPC) function in Windows 7 through Windows 10. ESET researchers identified the exploit in a campaign from the PowerPool threat group. The group has been active since 2017 but hasn’t been linked to any public breaches. The exploit can also be used to replace content of protected target files with malicious code, researchers say. It’s not really malicious, because it will ultimately execute notepad.exe with system privileges.”]

Source: https://www.darkreading.com/application-security/powerpool-malware-uses-windows-zero-day-posted-on-twitter