Hackers Exploit Microsoft SmartScreen Flaw: Are Your Credentials at Risk?

Hackers are exploiting a Microsoft SmartScreen vulnerability to deploy malware, despite a patch being available since February. Threat actors are using phishing emails to trick users into clicking harmful links, leading to infections with Lumma and Meduza Stealer. Apply the patch immediately to avoid becoming…

Hot Take:

Microsoft patches are like vegetables—everyone knows they’re good for you, but getting people to actually consume them is another story. Despite Microsoft’s best efforts, it seems the SmartScreen vulnerability is still proving to be a hacker’s buffet.

Key Points:

  • Hackers are exploiting a known vulnerability in Microsoft SmartScreen.
  • The vulnerability, tracked as CVE-2024-21412, allows threat actors to bypass security features.
  • Microsoft issued a patch in February 2023, but many users have not applied it.
  • The attack chain involves phishing emails that lead to infections with Lumma and Meduza Stealer malware.
  • Targets include individuals and organizations in Spain, the US, and Australia.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here