Windows, Chrome and Firefox zero-days exploited to spread malware

Cybersecurity researchers from Google’s Threat Analysis Group (TAG) are saying that a commercial company from Spain developed an exploitation network (otvara se u novoj kartici) for Windows, Chrome, and Firefox, and likely sold it to government entities sometime in the past.

In a blog post published earlier this week, the TAG team says that a Barcelona-based company called Variston IT is likely tied to the Heliconia framework, which exploits n-day vulnerabilities in Chrome, Firefox, and Microsoft Defender (otvara se u novoj kartici). It also says the company likely provided all the tools needed to deploy a payload to a target endpoint (otvara se u novoj kartici).

No active exploitations