Further, a second vulnerability allowed attackers to bypass Google Chromes V8 sandbox protection.
Google patched the sandbox bypass vulnerability in March 2024.
But that was just a disguise.
Visiting the website was all it took to get infected the game was just a distraction.
While weve seen APT actors pursuing financial gain before, this campaign was unique.
source: www.techworm.net