PuzzleMaker Threat Group Attacks Windows Devices

The recently patched vulnerabilities in Microsoft Windows and Google Chrome have been used in highly targeted attacks against the enterprise by a threat group called PuzzleMaker. The advisory describes the use of Google Chrome vulnerabilities CVE-2021-21220 and CVE-2021-21224 for initial access, followed by Windows vulnerabilities CVE-2021-31955 and CVE-2021-31956. The attack chain deploys a malware dropper that installs a remote shell capable of uploading files, creating processes, and self-destruction.