North Korean hackers exploit Chrome zero-day to deploy rootkit
North Korean hackers have exploited a recently patched Google Chrome zero-day (CVE-2024-7971) to deploy the FudModule rootkit after gaining SYSTEM privileges using a Windows Kernel exploit.
Citrine Sleet targets financial institutions, focusing on cryptocurrency organizations and associated individuals, and has been previously linked to Bureau 121 of North Korea’s Reconnaissance General Bureau.
![](https://kbin.life/media/cache/resolve/entry_thumb/56/f4/56f447a4dc743e37f9993c056a0442be10889bf9e1bbb45388ec6ef9d024c2af.jpg)