The North Korean Lazarus Group exploited a zero-day vulnerability in Google Chrome using a fake blockchain game to install spyware.