Windows users targeted with zero-day attacks via Internet Explorer
Briefly

Void Banshee exploits CVE-2024-38112 to infect machines with Atlantida info-stealer via disguised PDFs, targeting sensitive data. Distribution through cloud-sharing sites and Discord servers noted.
Security experts mention historical MHTML attacks like CVE-2021-40444, emphasizing the significance of CVE-2024-38112 due to leading to two critical patches and defense-in-depth measures.
Read at Securitymagazine
[
|
]