The hacking group known as Bismuth, APT32 or Ocean Lotus installed Monero miners on victims' networks while it was up to other, more nefarious activities, researchers say.
The zero day is exploitable through the way the app's Windows client manages a Unicode character that reverses the direction of text. A JavaScript file disguised as…