Microsoft has identified a North Korean threat actor, Citrine Sleet, exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote code execution on cryptocurrency targets.  The threat actor deployed the FudModule rootkit, previously attributed to Diamond Sleet, suggesting potential shared use of malware between these North Korean threat actors. The V8 JavaScript engine in Chrome versions prior to 128.0.6613.84 contained a type confusion vulnerability (CVE-2024-7971) that could be exploited to achieve remote code execution in the sandboxed renderer process.

Source: GBHackers