Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

The BlueMoon exploit kit chained an additional V8 sandbox escape in Google Chrome after exploiting the V8 type-confusion flaw. The sandbox escape had no assigned CVE identifier and was used in the wild as part of an exploit chain operated by multiple espionage-motivated activity clusters.