Multiple Chinese APT groups coordinated deployment of the BlueMoon exploit kit, chaining three zero-days (CVE-2024-7971, CVE-2024-8198, CVE-2024-38063) for browser compromise and Windows privilege escalation. Post-compromise lateral movement across targeted aerospace and defense networks highlights the value of runtime segmentation to contain multi-stage breach chains. #ZeroDay #ThreatIntel 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/bluemoon-exploit-kit-chrome-windows-zero-days-2026
Post summary
Chinese APT groups actively deployed the BlueMoon exploit kit chaining CVE-2024-7971, CVE-2024-8198, and CVE-2024-38063 to compromise browsers and elevate privileges, with evidence of lateral movement in aerospace and defense networks.