Malware News Information Stealer Exploits Windows SmartScreen Bypass

[silversurfer]

Content source

https://www.securityweek.com/information-stealer-exploits-windows-smartscreen-bypass/

A recent vulnerability in Windows SmartScreen is actively exploited in attacks leading to Phemedrone Stealer infections, cybersecurity firm Trend Micro reports.

The security defect, tracked as CVE-2023-36025 (CVSS score of 8.8), came to light on November 14, 2023, when Microsoft released patches for it and the US cybersecurity agency CISA added it to its Known Exploited Vulnerabilities catalog, based on evidence of in-the-wild exploitation.

Now, Trend Micro reports that a malicious campaign is actively exploiting CVE-2023-36025 to deliver Phemedrone Stealer, a previously unknown malware strain that can harvest a trove of information from the infected systems.

 

[Dave Russo]

Thanks for the article, the source"SecurityWeek" looks good