Lazarus hackers used fake DeFi game to exploit Google Chrome zero-day

Rasheed187 · Dec 8, 2024

Wow, this exploit didn't even need a Windows OS vulnerabilty to break out of Chrome's sandbox. Good reminder to always use anti-exploit software.

The North Korean Lazarus hacking group exploited a Google Chrome zero-day tracked as CVE-2024-4947 through a fake decentralized finance (DeFi) game targeting individuals in the cryptocurrency space.
Click to expand...

The 400MB ZIP download launches as expected, but it does not work past the login/registration screen as the backend infrastructure for the game was shut down. Furthermore, it did not perform any malicious actions on the target's system.
Click to expand...

The Google Chrome exploitation happens on the detankzone[.]com website itself, which contained a hidden script (index.tsx) designed to trigger an exploit for CVE-2024-4947, a type confusion in V8, Chrome's Javascript engine.
Click to expand...

https://www.bleepingcomputer.com/ne...-defi-game-to-exploit-google-chrome-zero-day/

Log in or Sign up

Lazarus hackers used fake DeFi game to exploit Google Chrome zero-day

Rasheed187 Registered Member

Log in or Sign up

Lazarus hackers used fake DeFi game to exploit Google Chrome zero-day

Rasheed187 Registered Member

Useful Searches