# North Korean Hackers Exploit Windows 0-Day for Advanced Rootkit Attack! 🚨

**URL:** <https://onehack.st/t/north-korean-hackers-exploit-windows-0-day-for-advanced-rootkit-attack/289510>\
**Category:** News & Articles\
**Tags:** tools\
**Created:** [August 21, 2024, 9:41am UTC](https://onehack.st/t/north-korean-hackers-exploit-windows-0-day-for-advanced-rootkit-attack/289510 "2024-08-21T09:41:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [August 21, 2024, 9:41am UTC](https://onehack.st/t/north-korean-hackers-exploit-windows-0-day-for-advanced-rootkit-attack/289510/1 "2024-08-21T09:41:41Z")

</div>

**Summary:**

1. **Zero-Day Exploited**  
North Korean hackers used a critical Windows vulnerability to deploy a sophisticated rootkit, FudModule. This zero-day flaw, patched last week by Microsoft, allowed attackers to gain high-level access.

2. **Targeted Attacks**  
The Lazarus hacking group targeted individuals in the cryptocurrency and aerospace sectors, aiming to steal digital assets and infiltrate corporate networks.

3. **Rootkit Details**  
FudModule, known since 2022, evades detection by operating deep within Windows. The latest variant exploited a bug in Windows’ AppLocker service for installation.

**Read more at:** [Ars Technica](https://arstechnica.com)