A recent Windows zero-day vulnerability, CVE-2024-38193, exploited by North Korean hackers, was used to install advanced rootkit malware. The exploit allowed attackers to gain system privileges, bypass security, and target sensitive sectors such as cryptocurrency and aerospace. The malware, FudModule, is known for its deep integration into the Windows kernel, making it difficult to detect and prevent. Researchers have linked this activity to the Lazarus Group, a notorious hacking organization backed by the North Korean government.

4m read timeFrom arstechnica.com
Post cover image
Table of contents
Ars VideoFurther Reading
3 Comments

Sort: