stock trading

Microsoft addressed a security bypass vulnerability identified as CVE-2024-38213 during the June 2024 Patch Tuesday. This vulnerability allowed attackers to circumvent the SmartScreen protection feature, which is designed to protect users from harmful software when opening downloaded files. The vulnerability could be exploited remotely by unauthenticated threat actors, requiring user interaction to succeed. Evidence of the vulnerability being actively exploited was uncovered by Trend Micro's Peter Girnus in March 2024, leading to its patch in June 2024. However, the advisory detailing the fix was inadvertently omitted from the security updates released that month and in July. During the March incidents, DarkGate malware operators exploited the SmartScreen bypass (CVE-2024-21412) to deploy malicious payloads disguised as legitimate software installers. This exploit, referred to as "copy2pwn," allowed files from a WebDAV source to be copied locally without the usual protective measures. CVE-2024-21412 was a workaround for another vulnerability, CVE-2023-36025, which had been exploited to deploy Phemedrone malware and was patched in November 2023. The hacking group Water Hydra, also known as DarkCasino, was implicated in exploiting CVE-2024-21412 to target stock trading Telegram channels and forex trading forums. Additionally, the same group exploited CVE-2024-29988 during malware attacks in February. Elastic Security Labs identified a design flaw in Windows Smart App Control and SmartScreen that allows programs to launch without security warnings, a vulnerability reported to Microsoft, which indicated it may be fixed in a future update.