Operation AppleJeus exploiting Chrome CVE-2022-0609 (compromised fintech websites)

Date (as written): 2022-03-24T16:00:00+00:00 (datePublished)
Year: 2022
Country: U.S. based
Actors (as written): North Korean group (Operation AppleJeus)
Actor pages: North Korean group
Tags (as written): cryptocurrency and fintech

Source entries (2)

Hackmageddon cyber attacks timelines (Paolo Passeri)

Over 85 users in cryptocurrency and fintech industries · 24/03/2022

Researchers from Google's Threat Analysis Group reveal the details of a campaign consistent with Operation AppleJeus, exploiting the Google Chrome CVE-2022-0609 vulnerability one month before it was patched. [Date Occurred: Since at least 04/01/2022; Date Discovered: 10/02/2022]

https://www.hackmageddon.com/2022/04/11/16-31-march-2022-cyber-attacks-timeline/

https://www.bleepingcomputer.com/news/security/north-korean-hackers-exploit-chrome-zero-day-weeks-before-patch/

Google Threat Analysis Group (TAG) blog

Operation AppleJeus exploiting Chrome CVE-2022-0609 (compromised fintech websites) · 2022-03-24T16:00:00+00:00 (datePublished)

Another North Korean group, whose activity has been publicly tracked as Operation AppleJeus, targeted over 85 users in cryptocurrency and fintech industries leveraging the same exploit kit. This included compromising at least two legitimate fintech company websites

https://blog.google/threat-analysis-group/countering-threats-north-korea/

Suggest a correction on GitHub