A zero-day exploit targets a vulnerability that the software vendor does not yet know about or has not yet patched. Because there is no fix available, defenders have zero days to prepare, which makes these attacks especially dangerous and valuable on criminal markets.
Infostealer operators increasingly bundle zero-day and recent exploits into their delivery chains to maximize infection rates. Some stealer builders even advertise browser zero-days to guarantee credential theft.
Read how a stealthy builder leveraged a Chromium zero-day in our Logins.zip analysis and a CVE-themed lure in the LDAPNightmare PoC trap.