4 groups caught using the same Chrome and Windows exploit kit

Security researchers from Proofpoint revealed Wednesday that at least four distinct hacking groups, including some with ties to the Chinese government, have been actively utilizing a nearly identical exploit kit. The malicious toolkit targets critical vulnerabilities in both Chromium-based web browsers and older versions of the Windows operating system.

The concurrent adoption of the same exploit infrastructure by multiple separate threat actors highlights a shared resource or coordinated methodology in targeting these specific browser and operating system flaws. The identification of these campaigns provides new insight into the operational overlap and capabilities of the groups involved, specifically noting state-sponsored elements among the users.