Chinese Actors Exploit Follina Zero-Day
The Windows zero-day vulnerability, identified as CVE-2022-30190 or Follina, is being exploited by China-linked TA413 APT to target the International Tibetan community by impersonating its “Women Empowerments Desk.” Microsoft has provided workarounds and mitigation measures to block any attacks exploiting the Follina flaw. Researchers expect that other attackers might join this race soon.