4 groups caught using the same Chrome and Windows exploit kit

BlueMoon is an actively used exploit kit that chains two Chromium vulnerabilities and a Windows kernel flaw to install arbitrary malware; Proofpoint observed at least four distinct threat groups (including actors with alleged Chinese government ties) rapidly sharing and deploying the chain. Researchers note unusually visible, fast exploitation likely driven by a Chromium patch-gap and AI-assisted exploit development, though vendors released patches within 24 hours.