North Korean hackers exploit flaw in Microsoft Edge using Internet Explorer Mode - patch NOW.
Take action: This flaw was patched 2 months ago, and even then Microsoft warned of active exploitation. DO NOT DELAY, you will be hacked. Initiate update for your Windows, and take a one hour walk until it completes.
Learn More
A North Korean threat actor, identified as APT37 (also known as RedEyes, Reaper, ScarCruft, Group123, and TA-RedAnt), is reported to be exploiting a flaw in Microsoft Edge using Internet Explorer Mode.
To exploit the bug, attackers require a user to just click on a crafted URL - which is nearly trivial for phishing attacks and various "free stuff" websites.
The North Korean group targeted a South Korean advertising agency and exploited the vulnerability via the "Toast" ad program, which is bundled with various free software.
APT37 compromised the advertising agency's servers to deliver malicious ad content. The ad program, when downloading and rendering the infected ad content, triggers the vulnerability without user interaction, leading to the download of malware. This tactic allowed the attackers to deploy malware and potentially gain full control over compromised systems.
Users of Windows are urged to patch their computers ASAP.
