// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-wedgDTG 0600Z
ColdRecon / Breach Radar / Microsoft
Breach Record

Microsoft

DISCLOSED 2024-01-12 · UNPATCHED CVE

The Phemedrone Stealer campaign actively exploits CVE-2023-36025, a Windows Defender SmartScreen bypass vulnerability, to deliver malware. Attackers use crafted .url files to evade SmartScreen warnings and execute malicious .cpl files, leading to data theft from browsers, crypto wallets, and messaging apps. The vulnerability was patched in November 2023 but remains...

The record

What we know

Disclosed
2024-01-12
Attack vector
Unpatched Cve
Sources

Cited reporting

↗ www.trendmicro.com (2024-01-12)
Similar vector · recent

Other unpatched cve breaches on file

Trezor · 2026-08-24 Trezor · 2026-08-23 Trezor · 2026-08-22 Trezor · 2026-08-21 Trezor · 2026-08-20 LexisNexis · 2026-08-17 Framework · 2026-08-12 Microsoft · 2026-08-12

This page is the permanent ColdRecon entry for the Microsoft disclosure. It updates if new public reporting emerges. All tracked breaches →

Microsoft just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →