DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero-Day Attack

A mid-January 2024 campaign abused a Microsoft SmartScreen bypass (CVE-2024-21412) and Google DoubleClick open redirects to distribute fake MSI installers (masquerading as legitimate software) that side-loaded DLLs and deployed DarkGate (v6.1.7) and other information-stealers and RATs; attackers used PDF-based lures, malvertising, and social engineering to scale infections and targeted financial institutions.