logo

Microsoft Smartscreen Vulnerability Exploited by Water Hydra (Campaign)

ID: 22c2356f-8e89-5cb8-bc66-3876d84763d5

STIX ID: report--22c2356f-8e89-5cb8-bc66-3876d84763d5

Feed Name: Wiz Cloud Threat Landscape

Threat Score
78/100

Date Published: 2024-02-13

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

Water Hydra (DarkCasino) is actively exploiting CVE-2024-21412 to bypass Microsoft Defender SmartScreen via malicious .url files distributed through spearphishing on forums and trading Telegram channels; successful exploitation results in installation of the DarkMe malware on victims' systems.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.