Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Executive Summary
Multiple espionage‑motivated threat clusters deployed a previously undocumented exploit kit, BlueMoon, which chains together several Windows and Google Chrome vulnerabilities. The first in‑the‑wild use was traced to the China‑aligned state‑sponsored group APT31 (also known as Bronze Vinewood, Judgement Panda, JungleBamboo).
Intelligence Metadata - Source Publisher: The Hacker News - Published Date: 2026-09-09T16:34:05+00:00 - Category: threat-intel
Original Description: Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31 (aka Bronze Vinewood, Judgement Panda, JungleBamboo,
"The beginning of knowledge is the discovery of something we do not understand."
— Frank Herbert